Static task
static1
Behavioral task
behavioral1
Sample
4e5fb293efa1c95f48b5bd03753042ec276775fa7015dc990f8fa0113882e2df.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4e5fb293efa1c95f48b5bd03753042ec276775fa7015dc990f8fa0113882e2df.exe
Resource
win10v2004-20240508-en
General
-
Target
4e5fb293efa1c95f48b5bd03753042ec276775fa7015dc990f8fa0113882e2df
-
Size
6.5MB
-
MD5
0904d2c104d8dc64ad0b271591ae6942
-
SHA1
362ce96b14d9dd9fb7bf396c151c91ec05d17523
-
SHA256
4e5fb293efa1c95f48b5bd03753042ec276775fa7015dc990f8fa0113882e2df
-
SHA512
265eb955d8678bf7978e609ae17ed4cb96ada324d78d6dcd005fd80255585698a6f70a7496f0e9dcf8f0e7e19d2ba29693644f4ecdee51cde7178fff04cea0b2
-
SSDEEP
98304:qyZt/q8ncX8i02txuPCIXasPyQWplm2XNVa4mzfsGENxm9C9epzTNKF:Fdq8cXHfwTKsPWpcuNYTnD9uepz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e5fb293efa1c95f48b5bd03753042ec276775fa7015dc990f8fa0113882e2df
Files
-
4e5fb293efa1c95f48b5bd03753042ec276775fa7015dc990f8fa0113882e2df.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
!bOb^* Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!bOb^* Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 534KB - Virtual size: 533KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fiaphwTm Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Code Enc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Xerin Size: 512B - Virtual size: 141B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ