Static task
static1
Behavioral task
behavioral1
Sample
200b4bbd25657a3c94e568e04b9b6417d4640a7f0748de8ec9fde721810c7bd4.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
200b4bbd25657a3c94e568e04b9b6417d4640a7f0748de8ec9fde721810c7bd4.exe
Resource
win10v2004-20240508-en
General
-
Target
200b4bbd25657a3c94e568e04b9b6417d4640a7f0748de8ec9fde721810c7bd4.exe
-
Size
875KB
-
MD5
35f49ae7af6b0396af39f7fafc574373
-
SHA1
66d6f87f587375b4ed11282774044582f75ea234
-
SHA256
200b4bbd25657a3c94e568e04b9b6417d4640a7f0748de8ec9fde721810c7bd4
-
SHA512
0bc2e43e86c39fa8ac75ec2a634b1cfbf29a9495fb45e6b1d9254c986cd0a4187ad57d881b4a4ef26ed77def94517820d4c2b672800aee462acbc20e7c1ba86b
-
SSDEEP
24576:515yC5ULIr7c5LRzpuDiSIhlRgaR0Bav:5735Hc5dzv2qEa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 200b4bbd25657a3c94e568e04b9b6417d4640a7f0748de8ec9fde721810c7bd4.exe
Files
-
200b4bbd25657a3c94e568e04b9b6417d4640a7f0748de8ec9fde721810c7bd4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 714KB - Virtual size: 713KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ