Static task
static1
Behavioral task
behavioral1
Sample
958aa94f4ad246b393cc98c789545c24bf974fb90447319ebbf34d0fa241edf4.exe
Resource
win7-20240611-en
General
-
Target
958aa94f4ad246b393cc98c789545c24bf974fb90447319ebbf34d0fa241edf4
-
Size
965KB
-
MD5
791d58c4ed6b8772eceda0b0254880e2
-
SHA1
a03bd87406f6025177c52a79fe81f1a59930aa37
-
SHA256
958aa94f4ad246b393cc98c789545c24bf974fb90447319ebbf34d0fa241edf4
-
SHA512
29382169fe2249c506e8895e1e2af6ff42c76a1e8ee352f1c9557106040280cf8b8548d98974a8b07fb3d1140f55a3627f856b77454463168a8d6014df2e7899
-
SSDEEP
12288:6tLTyenMEh/rI+Ea4seWbh1/PjsrCe3NsGTzbEr6JeUc/X016JNHJPXFk2LxvTr2:6tieMEe+HeWXjsldP3
Malware Config
Signatures
-
Detects executables packed with ConfuserEx Mod 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_ConfuserEx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 958aa94f4ad246b393cc98c789545c24bf974fb90447319ebbf34d0fa241edf4
Files
-
958aa94f4ad246b393cc98c789545c24bf974fb90447319ebbf34d0fa241edf4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 961KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ