Static task
static1
Behavioral task
behavioral1
Sample
9c7e4bc6d2c048eb942cfd0fb2089ce190e2f306a35a6cd25f7e0e0896f60f66.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9c7e4bc6d2c048eb942cfd0fb2089ce190e2f306a35a6cd25f7e0e0896f60f66.exe
Resource
win10v2004-20240730-en
General
-
Target
9c7e4bc6d2c048eb942cfd0fb2089ce190e2f306a35a6cd25f7e0e0896f60f66
-
Size
1.3MB
-
MD5
ecd1765ef784d0831b8ba7082f8c2370
-
SHA1
024b15d7f67fe4312b77735c3a2fc7e41077537b
-
SHA256
9c7e4bc6d2c048eb942cfd0fb2089ce190e2f306a35a6cd25f7e0e0896f60f66
-
SHA512
85602ad027c76dfdf28102cd3309df9738fda88934b6de468ab33cd09868473a86defe989f3e4740d9d113ace5db298e2c931099ca1c2286e73b75b5c9f85609
-
SSDEEP
24576:AoKVs1q893v/9/NJITBjN2MdfxbY6c9NfvqFii2EbBOGwbHXD0AIDN7HupGvbmg:AoLkoH9/NJYxNFxDmCFiBE4GwDoAIDN7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9c7e4bc6d2c048eb942cfd0fb2089ce190e2f306a35a6cd25f7e0e0896f60f66
Files
-
9c7e4bc6d2c048eb942cfd0fb2089ce190e2f306a35a6cd25f7e0e0896f60f66.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ