Static task
static1
Behavioral task
behavioral1
Sample
cea1fccfa1c2aed60a4b388a5678fd30244d5c7928f1946959e6d99806796f3d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cea1fccfa1c2aed60a4b388a5678fd30244d5c7928f1946959e6d99806796f3d.exe
Resource
win10v2004-20240226-en
General
-
Target
cea1fccfa1c2aed60a4b388a5678fd30244d5c7928f1946959e6d99806796f3d
-
Size
542KB
-
MD5
436a04635f47208ab6ca01a9ae1d3cbb
-
SHA1
f604d4a6e484f1c5e12e160c875b1112f6c7a922
-
SHA256
cea1fccfa1c2aed60a4b388a5678fd30244d5c7928f1946959e6d99806796f3d
-
SHA512
9dccb80fd09b94ac1c5e475ac59e4a195751f711f6ec38994f0cd2b5eeb987ce7d6b8d42d462d44751b05c2009b077daa25c3caf301419cb9fdf61f1f7a16c49
-
SSDEEP
12288:nGQjf9Q2cgcFgOxwj7TcwBCXP78sU5tnKe:Gk/cbwj7ThCf5U5tnT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cea1fccfa1c2aed60a4b388a5678fd30244d5c7928f1946959e6d99806796f3d
Files
-
cea1fccfa1c2aed60a4b388a5678fd30244d5c7928f1946959e6d99806796f3d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 540KB - Virtual size: 539KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ