Static task
static1
Behavioral task
behavioral1
Sample
70b4e9e67b0b8958459510f6b1de4dcf3fbc3c1bf2c55650d800694533c385ff.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
70b4e9e67b0b8958459510f6b1de4dcf3fbc3c1bf2c55650d800694533c385ff.exe
Resource
win10v2004-20240611-en
General
-
Target
70b4e9e67b0b8958459510f6b1de4dcf3fbc3c1bf2c55650d800694533c385ff.exe
-
Size
242KB
-
MD5
b20da8c093a4ae023048aaa9e3c9571f
-
SHA1
740cf678823014bb48ef39b20bb9855a0ce87991
-
SHA256
70b4e9e67b0b8958459510f6b1de4dcf3fbc3c1bf2c55650d800694533c385ff
-
SHA512
1fcfbacf2208f0cb2fb621dcc4063ebc449edbb54ba2cf1ba6a619d7285218ea7ccbd8f35b44d378521c57f8834271bcf6171c8cd2abcd710cd0078b5f5804c0
-
SSDEEP
6144:CWLxFzr/3ODCWv1qxSqMi68kZolWJ7MXVp+PtjqEBsI:C6HEDq0GRkZoKgVp+PtjqEBJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70b4e9e67b0b8958459510f6b1de4dcf3fbc3c1bf2c55650d800694533c385ff.exe
Files
-
70b4e9e67b0b8958459510f6b1de4dcf3fbc3c1bf2c55650d800694533c385ff.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
#MpvJ-U Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ