Static task
static1
Behavioral task
behavioral1
Sample
7c49e97cf68143e3e71085f48d3fb30a1751059e8951516004e1f3c951877094.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7c49e97cf68143e3e71085f48d3fb30a1751059e8951516004e1f3c951877094.exe
Resource
win10v2004-20240226-en
General
-
Target
7c49e97cf68143e3e71085f48d3fb30a1751059e8951516004e1f3c951877094.exe
-
Size
736KB
-
MD5
97439addd4f1e599d0de24ebefeaad06
-
SHA1
a31dcad6b2f18f7c1275656596b0a494394891a2
-
SHA256
7c49e97cf68143e3e71085f48d3fb30a1751059e8951516004e1f3c951877094
-
SHA512
c79747d60e4ad9e44cd5e6090e364ea3d42d9a035aba95dfa6343503ba82e3589cb954bc4e04367d1f60a761fb8443f3360d99df1e27ce66b30a906d65b90310
-
SSDEEP
12288:p3qyJMsRrIjz0tfxAh8jhsYMnTN3unmqZIHDb30AekRd/m1fZ:p6ORRcjAvjhsYMnTN3udIjbktkRd/m1B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c49e97cf68143e3e71085f48d3fb30a1751059e8951516004e1f3c951877094.exe
Files
-
7c49e97cf68143e3e71085f48d3fb30a1751059e8951516004e1f3c951877094.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 724KB - Virtual size: 722KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ