Static task
static1
Behavioral task
behavioral1
Sample
efbea3c102bcb9f7f4239416a6f16a00d75d44ba75b8c6c01b9e1f226ec3e3d7.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
efbea3c102bcb9f7f4239416a6f16a00d75d44ba75b8c6c01b9e1f226ec3e3d7.exe
Resource
win10v2004-20240709-en
General
-
Target
efbea3c102bcb9f7f4239416a6f16a00d75d44ba75b8c6c01b9e1f226ec3e3d7
-
Size
1.2MB
-
MD5
747c66213929acd44b0ef333d8bce70f
-
SHA1
72762d04bea2063797c908fdf69c17660ee34456
-
SHA256
efbea3c102bcb9f7f4239416a6f16a00d75d44ba75b8c6c01b9e1f226ec3e3d7
-
SHA512
9eb88af9ad2e3982cec02440b8d9edb16779158e5ef960298c0bfcaa4bc6752fb8e9fe3562c9fc1e3a3a8cbb3c705b3d11ab9c65272daf6169d8fd756704efa5
-
SSDEEP
24576:gw/4rEOWulpZlHbcWZGW/4rZu3AssPjK1yCb4F5pHqLV3U:gwgoWv7QXWgg+Pjky/Fbq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efbea3c102bcb9f7f4239416a6f16a00d75d44ba75b8c6c01b9e1f226ec3e3d7
Files
-
efbea3c102bcb9f7f4239416a6f16a00d75d44ba75b8c6c01b9e1f226ec3e3d7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ