Static task
static1
Behavioral task
behavioral1
Sample
b5fa786e0724f8f3b5eca8af940aa58a70d34458f8be1464c084f87dcbce8eed.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b5fa786e0724f8f3b5eca8af940aa58a70d34458f8be1464c084f87dcbce8eed.exe
Resource
win10v2004-20240611-en
General
-
Target
b5fa786e0724f8f3b5eca8af940aa58a70d34458f8be1464c084f87dcbce8eed
-
Size
737KB
-
MD5
9b600f674acfa4aa3e76f55f2bbcdd0b
-
SHA1
8a3ed3c26e3968d279021605260106df49064cb6
-
SHA256
b5fa786e0724f8f3b5eca8af940aa58a70d34458f8be1464c084f87dcbce8eed
-
SHA512
bef41bd3ade1fb5dfa2de57d69c47a2c671afbfb09b6a79e617238cc5df874ba9a92bd248c3018a8460aa04884d254de31aa54946fa2ae2e8c037b2ac4e3fd84
-
SSDEEP
12288:zTdXtfET864bmSnKCbxmTbFqYJb1T2xF1g3THc1GSzP+HeP:3d92OcbFLJb1y1gQ1GI0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5fa786e0724f8f3b5eca8af940aa58a70d34458f8be1464c084f87dcbce8eed
Files
-
b5fa786e0724f8f3b5eca8af940aa58a70d34458f8be1464c084f87dcbce8eed.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 730KB - Virtual size: 730KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ