Static task
static1
Behavioral task
behavioral1
Sample
Dropper.exe
Resource
win7-20240508-en
General
-
Target
Dropper.exe
-
Size
88KB
-
MD5
82f78463f2a3b53111a06367e6f9bfd7
-
SHA1
ef55bb9f0648e2f0e4444c54db5fdc4ba002ad9f
-
SHA256
3aed680e7ffde9f2f34681d7d60ee188862da9d48c7cace56060eebd6bbfb152
-
SHA512
b781362092c869cd0b8fd5f92c8e2ece37e65a8b864e7127d5a8837ab06d1a08decc795bc7a4bfa58f362af5db26d1287f289155d7408a47b9ecf054419583c0
-
SSDEEP
1536:hi8ujM8Nvd5hPSXvD1n70U4Ox+d9xHhGYL15b6tclMDgR:E84MMxSXpnJ6xfb6tYR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Dropper.exe
Files
-
Dropper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ