Static task
static1
Behavioral task
behavioral1
Sample
build.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
build.exe
Resource
win10v2004-20240802-en
General
-
Target
xehook197962030370407.zip
-
Size
515KB
-
MD5
fd41565cde67ed4adff8a2963fb08135
-
SHA1
ed88db0a0a4a9fb9a4d324300d7258d71b62f353
-
SHA256
13dcc8e21e7ce1aa8ffc421da3e790ae3dcfbe1451f2585f92853e1069f99b9e
-
SHA512
4817c8cf8a491994b1dc27be5d0d2dcc1e0190858008c4e28b152cbf26f0c16d899b517d60271e2b5ddf791c3e3033044f25e03a00746a61857bfa0df5ddf14e
-
SSDEEP
12288:5nYp3HGxNCguP8Yeeu+mtGH1nydv1SIND+kEklEsde9qF3HrJIMiijE/k80bVhIC:5Yp2xogAFbuKgeq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/build.exe
Files
-
xehook197962030370407.zip.zip
-
build.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ