Static task
static1
Behavioral task
behavioral1
Sample
c561f79451f89d62151c3c01db971fa2f93813b1c190e8dad600111b6e68543c.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c561f79451f89d62151c3c01db971fa2f93813b1c190e8dad600111b6e68543c.exe
Resource
win10v2004-20240709-en
General
-
Target
c561f79451f89d62151c3c01db971fa2f93813b1c190e8dad600111b6e68543c
-
Size
750KB
-
MD5
cfb3b1cee475fed60cfd7ddb63e3021a
-
SHA1
0df13ccd6cce6679d4525e54b264bfc0b772458a
-
SHA256
c561f79451f89d62151c3c01db971fa2f93813b1c190e8dad600111b6e68543c
-
SHA512
0943b45e0b7742981462fcfb785332fd67289c81c44d39798e2b9c02ad7f208e1cf7c5f036a658ca4787809b82f3dd1b836e9d5479e9fbfff0997f664839cb19
-
SSDEEP
12288:ywuV8Wf5fjKcjnW1VebF6ieLCtox0mjdZvR2imR5Pan5DsxZvD+yEGu16q7gjkrm:ywlyAoW1C6i3ox0QZvE53Sn5DsxZvDWg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c561f79451f89d62151c3c01db971fa2f93813b1c190e8dad600111b6e68543c
Files
-
c561f79451f89d62151c3c01db971fa2f93813b1c190e8dad600111b6e68543c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ