Static task
static1
Behavioral task
behavioral1
Sample
f691f3692f41c27b1ad3a3aafda99465caa64e9ad4bf6e848f6a7d429348ae79.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
f691f3692f41c27b1ad3a3aafda99465caa64e9ad4bf6e848f6a7d429348ae79.exe
Resource
win10v2004-20240508-en
General
-
Target
f691f3692f41c27b1ad3a3aafda99465caa64e9ad4bf6e848f6a7d429348ae79
-
Size
775KB
-
MD5
270c627c7705a68b0ea00dfcb70c9a9b
-
SHA1
d50fc4337e874996339b4a9dce5fb903ecc44676
-
SHA256
f691f3692f41c27b1ad3a3aafda99465caa64e9ad4bf6e848f6a7d429348ae79
-
SHA512
54285a2d08828e6c1f90259d8e456a9cb46d6ddd6901cd409505f1557b1d3097c9579e214401728bde721bab18a3122251239ff16038b899bcf106e0b9d8bcaf
-
SSDEEP
12288:MUdXtfETM35WMo2l0Co2s6B6tle8s+/gPhnzuEPFGLZxHGHn9BJiIBe:Nd92oWwoPtehzuEPFmmdB8IBe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f691f3692f41c27b1ad3a3aafda99465caa64e9ad4bf6e848f6a7d429348ae79
Files
-
f691f3692f41c27b1ad3a3aafda99465caa64e9ad4bf6e848f6a7d429348ae79.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 767KB - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ