Static task
static1
Behavioral task
behavioral1
Sample
87b29de4ec8f08c9a232a8e16ae7bd15c6a613eb527c0d753d6cd6a865ae9b65.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
87b29de4ec8f08c9a232a8e16ae7bd15c6a613eb527c0d753d6cd6a865ae9b65.exe
Resource
win10v2004-20240508-en
General
-
Target
87b29de4ec8f08c9a232a8e16ae7bd15c6a613eb527c0d753d6cd6a865ae9b65.exe
-
Size
2.2MB
-
MD5
db714795d3127df3de0e85f1b21db2c0
-
SHA1
9d2e46ce6b169dad1b111e920f82467a5b12bc57
-
SHA256
87b29de4ec8f08c9a232a8e16ae7bd15c6a613eb527c0d753d6cd6a865ae9b65
-
SHA512
9adf6c8736d1c301a90c18bfa894c31790bf6e0dbf9fe0cd3546534b11604f67b236abc3b14a503eaf29061a063a4ec19ae36b531139c0141be9e9cdec121968
-
SSDEEP
49152:HaBaI73XjuXGtprEQSsYOd0semVl4MUni:HaAIuaprEQpYO+yj4Hn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87b29de4ec8f08c9a232a8e16ae7bd15c6a613eb527c0d753d6cd6a865ae9b65.exe
Files
-
87b29de4ec8f08c9a232a8e16ae7bd15c6a613eb527c0d753d6cd6a865ae9b65.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ