Static task
static1
Behavioral task
behavioral1
Sample
TS.Desync69900 (1).exe
Resource
win10v2004-20240508-en
General
-
Target
TS.Desync69900 (1).exe
-
Size
1.5MB
-
MD5
aaf1ba15541f90afc068bd08b2ddc456
-
SHA1
a6add5aae8cc0eeda7d0d5417ab978608d9e7a6f
-
SHA256
3ae209c4dc4c7b42db3e1fc3081e302b30c346cba789e5a0aa6f1be26d775779
-
SHA512
cac7b4526133680a2bd8f9ec3cdc3dc72d928798f5e9d997793a8796cadef1f30f02e87e1bc09acaac9cce6458cf903a788f9a042f877d562f6e56038463086e
-
SSDEEP
24576:cxTrlInVN/O769VtqLrm1qNZ4KaxVByxCYVQ2:qva7OOrtqLS1qS/BSB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TS.Desync69900 (1).exe
Files
-
TS.Desync69900 (1).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ