Static task
static1
Behavioral task
behavioral1
Sample
17230659061f7212c82a51474b4881c633df451e130ec6cfbd94355d94352086b239967195549.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
17230659061f7212c82a51474b4881c633df451e130ec6cfbd94355d94352086b239967195549.exe
Resource
win10v2004-20240802-en
General
-
Target
17230659061f7212c82a51474b4881c633df451e130ec6cfbd94355d94352086b239967195549.dat-decod
-
Size
440KB
-
MD5
edfad175f97fe91185a1ed5beed5f468
-
SHA1
38d727b529960610605ab77a6648bf256ec1f674
-
SHA256
54d33439741f25609b9ed245db5f03451b01faaf670cc344cfc83bbf53287efb
-
SHA512
c34d9124676166ebb12dd354540052c12c82bf2bd15a80310541a9add5faa730ae713ea413fd335e77fe1b18c584b7e80a9057d856e36b5874646f7834ee0788
-
SSDEEP
12288:FB9LAl9CPBbnTS8x5QAVk8Gcey8KcEfrHFKP:FbAlk1TS8PQAK8lj8wrQP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17230659061f7212c82a51474b4881c633df451e130ec6cfbd94355d94352086b239967195549.dat-decod
Files
-
17230659061f7212c82a51474b4881c633df451e130ec6cfbd94355d94352086b239967195549.dat-decod.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 437KB - Virtual size: 437KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ