Static task
static1
Behavioral task
behavioral1
Sample
ExeFile (125).exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ExeFile (125).exe
Resource
win10v2004-20240802-en
General
-
Target
ExeFile (125).exe
-
Size
558KB
-
MD5
3046215569f0ddcfdda2e68f8f6de50b
-
SHA1
0ba5b1fae049dfa54d985dae779bd9709d56539f
-
SHA256
7a9332b0eb935bbca882f31bfcf49c303cc3346b4ae6eea81c5eb8b8bfee7234
-
SHA512
779d376c2c8f680b1ba974e51359935199b0663cfac05d2541ce83baadd1bc17485f648bab8871aa071498007ebffb704b94d7e2211cb7c3a1a04a9bf1bbfe73
-
SSDEEP
6144:mrY2M7X+isBRw8gh/lGyMNbJUSLfAuJl1T6d+:mwX0pgKLJ3fAun1Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ExeFile (125).exe
Files
-
ExeFile (125).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 426KB - Virtual size: 426KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ