Static task
static1
Behavioral task
behavioral1
Sample
caf0586f85dd3c2fdb3a14ae5851a72392d0836e0da0710212b9ec4a28196a8d.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
caf0586f85dd3c2fdb3a14ae5851a72392d0836e0da0710212b9ec4a28196a8d.exe
Resource
win10v2004-20240802-en
General
-
Target
caf0586f85dd3c2fdb3a14ae5851a72392d0836e0da0710212b9ec4a28196a8d
-
Size
1.9MB
-
MD5
6b6ac0e7274a4ff75876c5dc69299c1a
-
SHA1
be5af0ee148c8f0ba01f28b0f8606f5662eb4123
-
SHA256
caf0586f85dd3c2fdb3a14ae5851a72392d0836e0da0710212b9ec4a28196a8d
-
SHA512
ff8996d787ba69b1b1ac40529cfd7b3d8ad4fb0584fafcc58d8da36ac89ba3fada8bcd7a5a4804b3c0bbe9de591a4cd7ae72e91c68860c2b195bf7d37b322086
-
SSDEEP
49152:yiMns97lEbmzDLA5OitWN2Alx6GYy8HR2cD/xlV4t:DLJMYfnYlx2cV4t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caf0586f85dd3c2fdb3a14ae5851a72392d0836e0da0710212b9ec4a28196a8d
Files
-
caf0586f85dd3c2fdb3a14ae5851a72392d0836e0da0710212b9ec4a28196a8d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ