Static task
static1
Behavioral task
behavioral1
Sample
c0d99997926329a7a324f1a806b72e6c36f151b071061ef98bea2921346bf05e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c0d99997926329a7a324f1a806b72e6c36f151b071061ef98bea2921346bf05e.exe
Resource
win10v2004-20240508-en
General
-
Target
c0d99997926329a7a324f1a806b72e6c36f151b071061ef98bea2921346bf05e
-
Size
237KB
-
MD5
6f20d9be2280233b776b1ab39bbb7a6b
-
SHA1
0109f5f67d0281e2a05bfe4fa4200b67e3a6b01f
-
SHA256
c0d99997926329a7a324f1a806b72e6c36f151b071061ef98bea2921346bf05e
-
SHA512
3b3833aadffe392cd8d9fbb472aa6fddc2489fa4fc61b8a06d689170737690e7e8fe1461cf378351c17e14ed80aa35cd2dea68cd4d17c097802a4dafd216685e
-
SSDEEP
3072:hsXRmUIMitiMQose27vc+Eld+xZp2vPRL1tT06zJoxAWBcKpSP//dwR1l9B4hTJ:GR5IuMQoseGk7RZBGxAycKpSPX2pUH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0d99997926329a7a324f1a806b72e6c36f151b071061ef98bea2921346bf05e
Files
-
c0d99997926329a7a324f1a806b72e6c36f151b071061ef98bea2921346bf05e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ