Static task
static1
Behavioral task
behavioral1
Sample
678a9c6bdd6e753b1a05eff6f101530352446f8c09baac9218d7e6fc7308cf9f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
678a9c6bdd6e753b1a05eff6f101530352446f8c09baac9218d7e6fc7308cf9f.exe
Resource
win10v2004-20240226-en
General
-
Target
678a9c6bdd6e753b1a05eff6f101530352446f8c09baac9218d7e6fc7308cf9f
-
Size
894KB
-
MD5
b58983724e70d9cc8fea16ca0e3351e4
-
SHA1
edc891002cfbd47e94b98efb17fd773318435415
-
SHA256
678a9c6bdd6e753b1a05eff6f101530352446f8c09baac9218d7e6fc7308cf9f
-
SHA512
997795712a3b33498e00e29827fe4fba6c32769008bc94f81eea9485185a6882c09f42a69b6cd893a907cb83bc13bd55caf766f94b83dc8554f2bbc56c159b91
-
SSDEEP
12288:naCR5leZlNmYwFFQZU7W7snbDTzAj8lO4tGC43J4bRtP1gqGnhjuw80x2p+9V:a+ertOQ+7tbD4A51bhgtnkwx2a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 678a9c6bdd6e753b1a05eff6f101530352446f8c09baac9218d7e6fc7308cf9f
Files
-
678a9c6bdd6e753b1a05eff6f101530352446f8c09baac9218d7e6fc7308cf9f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 699KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 190KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ