Static task
static1
Behavioral task
behavioral1
Sample
d5785678beb403d8aebc7985e44ad7a4d89af1d784484a1acc0408de9c80920d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5785678beb403d8aebc7985e44ad7a4d89af1d784484a1acc0408de9c80920d.exe
Resource
win10v2004-20240426-en
General
-
Target
d5785678beb403d8aebc7985e44ad7a4d89af1d784484a1acc0408de9c80920d
-
Size
1.5MB
-
MD5
55dc9a3b09b69c850a4ed0281c30db2a
-
SHA1
1aa971c138f5abe1307563dfaa989fb9a72afc38
-
SHA256
d5785678beb403d8aebc7985e44ad7a4d89af1d784484a1acc0408de9c80920d
-
SHA512
903e6c2578b6ae38866108a5a0742608dd0345c9291e117945fa5a1ae48da8e481b1a01b0ed9879a70983d6a94539e524a909905479fbe488ab81ca4ed430a69
-
SSDEEP
24576:MFFu57c9IW+K4/izRXTOkMtrIceMaFPjkjD29:tc9IWPakOElMaFLk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5785678beb403d8aebc7985e44ad7a4d89af1d784484a1acc0408de9c80920d
Files
-
d5785678beb403d8aebc7985e44ad7a4d89af1d784484a1acc0408de9c80920d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ