Static task
static1
Behavioral task
behavioral1
Sample
147yjk90ogd9irh7.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
147yjk90ogd9irh7.exe
Resource
win10v2004-20240508-en
General
-
Target
147yjk90ogd9irh7.exe
-
Size
355KB
-
MD5
1c1d8ed721440cf230fbbff23f1962f3
-
SHA1
84f08949c9e464804ac2699bb6250a126eca5bd1
-
SHA256
99233bc704042ed63e66e48873cf09e24eddc640bd30e7ac641c1eebea23ce38
-
SHA512
cbb702370f3fd8122cde87af457a61412ca015a683fc925291d772b1caf5675cda8f92764158ffda240f1c43c3f56c41f1e7ab916634545c9a866ecd43a72bd7
-
SSDEEP
6144:p1jVOgmUZyeUwQLHXPZc4VoIb97SkPTZ+7NflTA6zN+YdbQ2gDkk:vxOgZ4eUFonzN+X2gQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 147yjk90ogd9irh7.exe
Files
-
147yjk90ogd9irh7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ