Static task
static1
Behavioral task
behavioral1
Sample
cd3690f49ae4068adada43adae5c5aaef08ce487e421b44a92cfd015b271924a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd3690f49ae4068adada43adae5c5aaef08ce487e421b44a92cfd015b271924a.exe
Resource
win10v2004-20240508-en
General
-
Target
cd3690f49ae4068adada43adae5c5aaef08ce487e421b44a92cfd015b271924a
-
Size
195KB
-
MD5
365870a9e99a18ac4600972fa13dc418
-
SHA1
20ebffa37b97e487a052c6585f558936d2afb3a8
-
SHA256
cd3690f49ae4068adada43adae5c5aaef08ce487e421b44a92cfd015b271924a
-
SHA512
f45c22bf3f8c286639e4434dbae1c5e508b56543d54282dcb3b8823aea96f0d6e078ba0cd8711534d30ced89f07cda83f1c15e691ba417308ccaf892b7aa3272
-
SSDEEP
1536:us6jn/AMN4kFQZbQrzrfQoRz4G/12TpC29joyAkUOMx7g4OXy2Mky4wRLaQ7jdVI:a/J0QzrooRz4G/12T5oLLKUlaWHRgp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd3690f49ae4068adada43adae5c5aaef08ce487e421b44a92cfd015b271924a
Files
-
cd3690f49ae4068adada43adae5c5aaef08ce487e421b44a92cfd015b271924a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ