Static task
static1
Behavioral task
behavioral1
Sample
699c33bd31a497c15779cb9c10e24fe9688a35412e4048ea926ccfe9f4ced929.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
699c33bd31a497c15779cb9c10e24fe9688a35412e4048ea926ccfe9f4ced929.exe
Resource
win10v2004-20240508-en
General
-
Target
699c33bd31a497c15779cb9c10e24fe9688a35412e4048ea926ccfe9f4ced929
-
Size
227KB
-
MD5
23159c2f60356fd102f4b484f2943c63
-
SHA1
1d6457f0c17922fa6902fb8509449e01cb6bf569
-
SHA256
699c33bd31a497c15779cb9c10e24fe9688a35412e4048ea926ccfe9f4ced929
-
SHA512
1800eccb218f7cb87395a4d85e815ca862dea36051a790952b5022e7a7203baf75c6d85380e6e5f7d2f49ce9059e41384b35c5a5934bb0d5fa49eac5fba401d7
-
SSDEEP
3072:akL4wPhCRsazAOLJxIMg9SUn6jDrZYUTp0PxqeCms5xBPav75RY6GtE8dB1gC2Ne:Ms209SxuUTptQsvBm5R0OmWbNi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 699c33bd31a497c15779cb9c10e24fe9688a35412e4048ea926ccfe9f4ced929
Files
-
699c33bd31a497c15779cb9c10e24fe9688a35412e4048ea926ccfe9f4ced929.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 215KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ