Static task
static1
Behavioral task
behavioral1
Sample
20a57983cd6e8566bc3592dbbeac65c14fa41c2f9ea5bd8bfb6a75e6a95ade1e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20a57983cd6e8566bc3592dbbeac65c14fa41c2f9ea5bd8bfb6a75e6a95ade1e.exe
Resource
win10v2004-20240508-en
General
-
Target
20a57983cd6e8566bc3592dbbeac65c14fa41c2f9ea5bd8bfb6a75e6a95ade1e
-
Size
1.8MB
-
MD5
289e6bec14d2312a1215c06f2dbe2873
-
SHA1
345219d36a90efb2c06299a7fb10b7184b87709b
-
SHA256
20a57983cd6e8566bc3592dbbeac65c14fa41c2f9ea5bd8bfb6a75e6a95ade1e
-
SHA512
962dbe01455651d4c3c319e0b39a59658ee67971c816ec4f2c742556d2d8739824857e5d21b3a2f483dd13defdb18539b8c77d984200b34c27c3de174152a194
-
SSDEEP
24576:FPVo8tsmYenSEbX3biRH7QTAgiewVhFTV0eIEtbklBbUFBpjX31yIjh+3v6:FPDtsm4EbX3biRsPWLyOILAsI2v6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20a57983cd6e8566bc3592dbbeac65c14fa41c2f9ea5bd8bfb6a75e6a95ade1e
Files
-
20a57983cd6e8566bc3592dbbeac65c14fa41c2f9ea5bd8bfb6a75e6a95ade1e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ