Static task
static1
Behavioral task
behavioral1
Sample
d244a19b8f1c267548bf22d1095804c37da30c05a11499bd33ac77c0a69c9eda.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d244a19b8f1c267548bf22d1095804c37da30c05a11499bd33ac77c0a69c9eda.exe
Resource
win10v2004-20240508-en
General
-
Target
d244a19b8f1c267548bf22d1095804c37da30c05a11499bd33ac77c0a69c9eda
-
Size
461KB
-
MD5
ed33360c626ff481dbe25f88669127f5
-
SHA1
480b0c413023827e552bd7fa160a8a97e0665eec
-
SHA256
d244a19b8f1c267548bf22d1095804c37da30c05a11499bd33ac77c0a69c9eda
-
SHA512
7d01012b3d542517e0bb99490899d12bfefce593ecb5b3afd7413a40aaa429d371f571a57735aa575f2f0b07170d72b1bda7d710a377e05f0c243b26a15a8dcd
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d244a19b8f1c267548bf22d1095804c37da30c05a11499bd33ac77c0a69c9eda
Files
-
d244a19b8f1c267548bf22d1095804c37da30c05a11499bd33ac77c0a69c9eda.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ