Static task
static1
Behavioral task
behavioral1
Sample
872593063b4fad7b6355ee53d4f4017320851167b18311674e8869d983191d82.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
872593063b4fad7b6355ee53d4f4017320851167b18311674e8869d983191d82.exe
Resource
win11-20240802-en
General
-
Target
872593063b4fad7b6355ee53d4f4017320851167b18311674e8869d983191d82
-
Size
367KB
-
MD5
a8fbdf30ea6c2123df0a50d5e4e6419a
-
SHA1
596e543b3336b7bd64638eae9dd85bc7f8fbf771
-
SHA256
872593063b4fad7b6355ee53d4f4017320851167b18311674e8869d983191d82
-
SHA512
1403dd5427e969d0925447acdabfa177c33187fe30fd6a99774a19bdbc68dae37da4f8f3294d4db724ad49bb85930be9666b42c22beed8b1343825b704233d55
-
SSDEEP
6144:k82Jsht3YefQ+X/nHmHiHLuW6MoF9dSll3jUjjqrBv4h/vXNi66ZjNztsbSDDX+8:k82KhnfQqHFLzoYP0jq1Y/v8bjNztsbs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 872593063b4fad7b6355ee53d4f4017320851167b18311674e8869d983191d82
Files
-
872593063b4fad7b6355ee53d4f4017320851167b18311674e8869d983191d82.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
|0ZPh Size: 317KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ