Static task
static1
Behavioral task
behavioral1
Sample
4f6463b100f7812cc3d70de6abf38bd48290132ed93bc275fcedc5ef7571ff59.exe
Resource
win7-20240221-en
General
-
Target
4f6463b100f7812cc3d70de6abf38bd48290132ed93bc275fcedc5ef7571ff59.exe
-
Size
670KB
-
MD5
3fb66f7afdfd53815bc1d679d48ad56f
-
SHA1
01b5813a176817128164ee1ec5979201d892ccea
-
SHA256
4f6463b100f7812cc3d70de6abf38bd48290132ed93bc275fcedc5ef7571ff59
-
SHA512
1e465e9e60791712c2eef1d6fd001678f2de42999b40bfeee503f52c5e8257d3ebb8ee5e46b49d1df437e0d65de6c1f253323a4353801245ede0614c126dd9b6
-
SSDEEP
12288:hiXXNuRchblmtgCb/P+baNvc1bEJluuJ8tBeO2dkE3YpmrMbksg0FBO3sb:hCYaaNvc1k98tMO2GEoPB9Fk30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f6463b100f7812cc3d70de6abf38bd48290132ed93bc275fcedc5ef7571ff59.exe
Files
-
4f6463b100f7812cc3d70de6abf38bd48290132ed93bc275fcedc5ef7571ff59.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 658KB - Virtual size: 657KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ