Static task
static1
Behavioral task
behavioral1
Sample
a801f318b4fa1eabb310d01989034deec79bdd04659718ef31c2bc4bfe903d9f.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a801f318b4fa1eabb310d01989034deec79bdd04659718ef31c2bc4bfe903d9f.exe
Resource
win10v2004-20240802-en
General
-
Target
a801f318b4fa1eabb310d01989034deec79bdd04659718ef31c2bc4bfe903d9f
-
Size
1.2MB
-
MD5
5aa3b8a8d6d81efeda0e26801293ca4b
-
SHA1
0eba56e81c11314ef047042b1c017ab2bafb2dc1
-
SHA256
a801f318b4fa1eabb310d01989034deec79bdd04659718ef31c2bc4bfe903d9f
-
SHA512
5903fd70714ae905fe59dfee47c974116227480435df34eaafff2d1ada1d372c42060daedcc99c05c8c4c8293df8fbf41544e8cee775042525f679bb00ee9869
-
SSDEEP
24576:KCnT4M4E6lyywUOHKjzbqnmKJRf1e/oAl3d+kB+qx:zn0uywHKnbmmKVaJl3gD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a801f318b4fa1eabb310d01989034deec79bdd04659718ef31c2bc4bfe903d9f
Files
-
a801f318b4fa1eabb310d01989034deec79bdd04659718ef31c2bc4bfe903d9f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
!g!pI Size: 647KB - Virtual size: 647KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ