Static task
static1
Behavioral task
behavioral1
Sample
9ee121fea71060471c5e5e4a6bb8dfa8e246dd35849b390351731dfe1cece6af.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9ee121fea71060471c5e5e4a6bb8dfa8e246dd35849b390351731dfe1cece6af.exe
Resource
win10v2004-20240508-en
General
-
Target
9ee121fea71060471c5e5e4a6bb8dfa8e246dd35849b390351731dfe1cece6af
-
Size
283KB
-
MD5
d61f8621b0d15674eb685d96a7b5effb
-
SHA1
8e3d7f81bf507984ea36fe2e410ac1a76f3c3b67
-
SHA256
9ee121fea71060471c5e5e4a6bb8dfa8e246dd35849b390351731dfe1cece6af
-
SHA512
41617f5d1ec03eb368a08255d14c05ee29b3eeed2e051cb560fa341d82c146f85e0b211905b0a5f6feb39d8436c86c7218de009f339eb1fee93037e2ab7ece8f
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ee121fea71060471c5e5e4a6bb8dfa8e246dd35849b390351731dfe1cece6af
Files
-
9ee121fea71060471c5e5e4a6bb8dfa8e246dd35849b390351731dfe1cece6af.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ