Static task
static1
Behavioral task
behavioral1
Sample
af718485d77bed6fed628287c39ac610N.exe
Resource
win7-20240708-en
General
-
Target
af718485d77bed6fed628287c39ac610N.exe
-
Size
207KB
-
MD5
af718485d77bed6fed628287c39ac610
-
SHA1
fc20069182f37dc94242dc1de393f719ddcc09b3
-
SHA256
672999def8a70d18593f3a81fd1efdb2e1c4e69cbf37861378e97c5e207b46f2
-
SHA512
e07c91f5d6193e4eacf9facf8258e22ef0ad6ce7713553e5a8a9acaadd4f2c965ca4ab7e0a4c6f8307711abb907bd4d81cfb404cd173b783837edd7e74bdf0b7
-
SSDEEP
6144:lPbBdMnHrqSRvCFYNsqnDUFnhl58KIghkNJ:9b3I1Rv8ssXhlWKIgGNJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af718485d77bed6fed628287c39ac610N.exe
Files
-
af718485d77bed6fed628287c39ac610N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 205KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ