Static task
static1
Behavioral task
behavioral1
Sample
ff90309a7ad512ec8dca705e4d9ca3d9e63b849d158e9855a7318ec0b9c2b203.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff90309a7ad512ec8dca705e4d9ca3d9e63b849d158e9855a7318ec0b9c2b203.exe
Resource
win10v2004-20240508-en
General
-
Target
ff90309a7ad512ec8dca705e4d9ca3d9e63b849d158e9855a7318ec0b9c2b203.exe
-
Size
697KB
-
MD5
4d0bba821fc581a72499ee57fff121f8
-
SHA1
749b8a396d343392a754ebde5727388e4e8830f4
-
SHA256
ff90309a7ad512ec8dca705e4d9ca3d9e63b849d158e9855a7318ec0b9c2b203
-
SHA512
aa852708597bbca2ecad9f45b369ac8220519ece3c1e806cce5acce9758880915a7d108c3a64d18033fc182a6d831de7e8cc7d47928bf170241e027f2a67cace
-
SSDEEP
12288:7Kc8V/xSKG7rKdkOOERvOQ4XScBMcuvVaqxQduDl5xCeRXU:H7rWkAKXd4v4yTC+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff90309a7ad512ec8dca705e4d9ca3d9e63b849d158e9855a7318ec0b9c2b203.exe
Files
-
ff90309a7ad512ec8dca705e4d9ca3d9e63b849d158e9855a7318ec0b9c2b203.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 687KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ