Static task
static1
Behavioral task
behavioral1
Sample
447ed0bdf4f8d0479545724b9578d2a3296b6bc5e2162d7ba405276234eccf0d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
447ed0bdf4f8d0479545724b9578d2a3296b6bc5e2162d7ba405276234eccf0d.exe
Resource
win10-20240404-en
General
-
Target
447ed0bdf4f8d0479545724b9578d2a3296b6bc5e2162d7ba405276234eccf0d
-
Size
681KB
-
MD5
4f5771aa008fb55801a3f9fba7130f69
-
SHA1
eaace725791c08810198c08907b84b8850d4ef5b
-
SHA256
447ed0bdf4f8d0479545724b9578d2a3296b6bc5e2162d7ba405276234eccf0d
-
SHA512
0ce8c4c44338d92f4a5f07f38a93812a85ce5524a4ed0c4e4d616127ea6fe02e94df0938075b4d2dc3eead2fac4a827230b0d2e1333bb51146d92417b1a5bfec
-
SSDEEP
12288:Llq9SNKjqNUt5LRfyUgpBvBV9aPp2exoxNxFhWuR4OM8AfCZghsWT9FLUI/D/vqO:Ll+SNKeslybnBOexBO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 447ed0bdf4f8d0479545724b9578d2a3296b6bc5e2162d7ba405276234eccf0d
Files
-
447ed0bdf4f8d0479545724b9578d2a3296b6bc5e2162d7ba405276234eccf0d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ