Static task
static1
Behavioral task
behavioral1
Sample
8705bae0103d7f51744368c4cce91f3a1c1d9f628693e7a60c182e3fb1153638.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8705bae0103d7f51744368c4cce91f3a1c1d9f628693e7a60c182e3fb1153638.exe
Resource
win10v2004-20240508-en
General
-
Target
8705bae0103d7f51744368c4cce91f3a1c1d9f628693e7a60c182e3fb1153638
-
Size
704KB
-
MD5
d3657285a8b11a3ac40d7b55d8ced340
-
SHA1
63ae5374ffda222af39a45cd1f172b8d9088b2e2
-
SHA256
8705bae0103d7f51744368c4cce91f3a1c1d9f628693e7a60c182e3fb1153638
-
SHA512
539158a91d162fdbcdc4263cc4b8d875276149cd66df32af0e974c64998bba0a24da02a1a781f90e7ea15963d27f85912e5cac5445dfdbd75952a8c3328f78e6
-
SSDEEP
12288:jdhDhagHCN1kPB+6yikBHq7STc89yEv5MdcUxYqhhNGsFuuf2uh:RhDhagq1kPei/7STc8IExbU9hCsFumh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8705bae0103d7f51744368c4cce91f3a1c1d9f628693e7a60c182e3fb1153638
Files
-
8705bae0103d7f51744368c4cce91f3a1c1d9f628693e7a60c182e3fb1153638.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 680KB - Virtual size: 673KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ