Static task
static1
Behavioral task
behavioral1
Sample
8956e85e2cd242009577a0c1b3d2abd6f503e2c79e1c4dbbe48f827a9513133e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8956e85e2cd242009577a0c1b3d2abd6f503e2c79e1c4dbbe48f827a9513133e.exe
Resource
win10v2004-20240508-en
General
-
Target
8956e85e2cd242009577a0c1b3d2abd6f503e2c79e1c4dbbe48f827a9513133e
-
Size
51KB
-
MD5
cd8d667b2dc6f6b654be4b0bd7f2866f
-
SHA1
7fbb3a78c89a4cc5fe19f80193e36a37452a14f9
-
SHA256
8956e85e2cd242009577a0c1b3d2abd6f503e2c79e1c4dbbe48f827a9513133e
-
SHA512
0e9f73a8b57c7777766da2036cf313045b67558d543fe024b7e7ffae204615c15fb96bbad6087815e9aafaa159d8ea2ee40b4d14712402f536bae3a4adfc7124
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8956e85e2cd242009577a0c1b3d2abd6f503e2c79e1c4dbbe48f827a9513133e
Files
-
8956e85e2cd242009577a0c1b3d2abd6f503e2c79e1c4dbbe48f827a9513133e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ