Static task
static1
Behavioral task
behavioral1
Sample
1659e815137c94e2a232a3275fbab83faa84135c5c6f4828f331c6f3566e065a.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1659e815137c94e2a232a3275fbab83faa84135c5c6f4828f331c6f3566e065a.exe
Resource
win10v2004-20240508-en
General
-
Target
1659e815137c94e2a232a3275fbab83faa84135c5c6f4828f331c6f3566e065a
-
Size
74KB
-
MD5
f038a5121b4682d2ab73249c69ecdb44
-
SHA1
3b0426ee69cecd96b48912c800f7868b71251051
-
SHA256
1659e815137c94e2a232a3275fbab83faa84135c5c6f4828f331c6f3566e065a
-
SHA512
d138617b4242a10ee7dcbc50d6bdf881953696567d3c6256cda940ebac6337458255aa93b53e91caa41d5396db3c25712c16030bd8c1f7d7492f67a450f92e39
-
SSDEEP
768:6k4/xlW544jQ9AhSTvA3FWW4HBMV/uFUO57DP2Npr0:H5HQ9VsFWXCw1ZMx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1659e815137c94e2a232a3275fbab83faa84135c5c6f4828f331c6f3566e065a
Files
-
1659e815137c94e2a232a3275fbab83faa84135c5c6f4828f331c6f3566e065a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ