Static task
static1
Behavioral task
behavioral1
Sample
281b96d049732147ee74dff842d41413aeb057b42d17ea0fe547e7a5c462d551.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
281b96d049732147ee74dff842d41413aeb057b42d17ea0fe547e7a5c462d551.exe
Resource
win10v2004-20240611-en
General
-
Target
281b96d049732147ee74dff842d41413aeb057b42d17ea0fe547e7a5c462d551.exe
-
Size
423KB
-
MD5
08be2e60de6e47be332eb9e53103a02f
-
SHA1
f35707ccfd1c31c44866742a03b8d0e327c9c170
-
SHA256
281b96d049732147ee74dff842d41413aeb057b42d17ea0fe547e7a5c462d551
-
SHA512
2f7bb6c72e81f64a348b619a0637a95c8b0b6d22233480e7b1cda9709d65e9c62151da6a4b1658f4feb28b6e52706eeaa85f07e4c4b0828ca05f5cb7d6d739d0
-
SSDEEP
1536:UtDATA1L97Pke0SMYloVBxQ1Hdu6T3oOFaMmVWgojNre7jvBwhOpQ6HHpqxLy0uI:UATyb0SMYBbTYUa/Vxe9e79whO69uyF
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_SmartAssembly -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 281b96d049732147ee74dff842d41413aeb057b42d17ea0fe547e7a5c462d551.exe
Files
-
281b96d049732147ee74dff842d41413aeb057b42d17ea0fe547e7a5c462d551.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ