Static task
static1
Behavioral task
behavioral1
Sample
63865ec811d3458b6dbf10d0cf13332db61e851cb36ee4831758055338be966c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63865ec811d3458b6dbf10d0cf13332db61e851cb36ee4831758055338be966c.exe
Resource
win10v2004-20240508-en
General
-
Target
63865ec811d3458b6dbf10d0cf13332db61e851cb36ee4831758055338be966c
-
Size
951KB
-
MD5
dbb9dd32a45bd834220df5ff9578a172
-
SHA1
d1bfd0d6e93311027da5af2423d6574cf9c58e24
-
SHA256
63865ec811d3458b6dbf10d0cf13332db61e851cb36ee4831758055338be966c
-
SHA512
beee7c02298439c3f9996b03215fa8fea033a6eaa156c34e894ebece272d410b68ac9a91794d94b7b2fb78da6dd69c5ccf1eb571721e151d2d63961a0465bda5
-
SSDEEP
24576:k6daLfIt7CyhM+SpyqlfxW6OXPNEgDas/NDlcBAiwQVVHz:k6mRWPNECNGuQVp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63865ec811d3458b6dbf10d0cf13332db61e851cb36ee4831758055338be966c
Files
-
63865ec811d3458b6dbf10d0cf13332db61e851cb36ee4831758055338be966c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 948KB - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ