Static task
static1
Behavioral task
behavioral1
Sample
4e5316bf3ce560b23cd230b56f92b206af0ad8b7b6ab684886938c3249618b28.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4e5316bf3ce560b23cd230b56f92b206af0ad8b7b6ab684886938c3249618b28.exe
Resource
win10v2004-20240508-en
General
-
Target
4e5316bf3ce560b23cd230b56f92b206af0ad8b7b6ab684886938c3249618b28
-
Size
1.1MB
-
MD5
6ae2fc4c6f5900c05569d8f0bbf7ab49
-
SHA1
583f4668b9f709a5a125e60254f64f60c136fb5f
-
SHA256
4e5316bf3ce560b23cd230b56f92b206af0ad8b7b6ab684886938c3249618b28
-
SHA512
5b57243585b385ec2e8c9bd2d7768e259ff39a1519f695de294972b514ab78b1b6f47b207bb90cc97048c2013125a1b851dcc176cb5bbdea9d2825055c015c76
-
SSDEEP
24576:Yj5wqwWlkqjVnlqud+/2P+AGTOG+yFoBOkA+mTNHx0t71N/otsIuF:YFHwakqXfd+/9AF0aRER0vNgtG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e5316bf3ce560b23cd230b56f92b206af0ad8b7b6ab684886938c3249618b28
Files
-
4e5316bf3ce560b23cd230b56f92b206af0ad8b7b6ab684886938c3249618b28.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ