Static task
static1
Behavioral task
behavioral1
Sample
8048e53dd3e484c96e5f586ab9e4152a173364144ad9a50baa050222f61d3a9e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8048e53dd3e484c96e5f586ab9e4152a173364144ad9a50baa050222f61d3a9e.exe
Resource
win10v2004-20240426-en
General
-
Target
8048e53dd3e484c96e5f586ab9e4152a173364144ad9a50baa050222f61d3a9e.exe
-
Size
722KB
-
MD5
b4d30842f7791c314b5793b467e2e40c
-
SHA1
4fd12e0aa4c9843ff3b42aaf3c2efccb94d76124
-
SHA256
8048e53dd3e484c96e5f586ab9e4152a173364144ad9a50baa050222f61d3a9e
-
SHA512
3a3ff969fafcc390654e02ef1bb37687dd797fdcb96a9574e5d1e5166b548b75569bcbc2ef4fb78d784c1b0dd987c2e79988e17bc09d636952143dc047444c4e
-
SSDEEP
12288:+jv732EXsNCjClPiCrybSHcPw+DN53qPIfm6JIqQXElHnsKptYP9ciE8b7PXVj:qb2w6la4fAiPI+6CElHntfYPaiE8b7tj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8048e53dd3e484c96e5f586ab9e4152a173364144ad9a50baa050222f61d3a9e.exe
Files
-
8048e53dd3e484c96e5f586ab9e4152a173364144ad9a50baa050222f61d3a9e.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ