Static task
static1
Behavioral task
behavioral1
Sample
efd99aa11e8ac9de709a702a21db7fbfb82072c4b0a423cbe71bb6f248d4c1ea.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
efd99aa11e8ac9de709a702a21db7fbfb82072c4b0a423cbe71bb6f248d4c1ea.exe
Resource
win10v2004-20240802-en
General
-
Target
efd99aa11e8ac9de709a702a21db7fbfb82072c4b0a423cbe71bb6f248d4c1ea.exe
-
Size
883KB
-
MD5
054bfa3b3a6ad3e2904f01ded716c1ec
-
SHA1
5159232b0c789af86945992ad9e86bba452fd90e
-
SHA256
efd99aa11e8ac9de709a702a21db7fbfb82072c4b0a423cbe71bb6f248d4c1ea
-
SHA512
1c8f575c3c39b5d791e6bc35daa0cb8f6cd5770d098519660664ecea36555035663b9f78260b334004331e4fcf1045dc319dac775d7ebbb1971614a7e26927ac
-
SSDEEP
12288:tGFbly/UlQT0UKgVvXaRx+C6bbmNmzYKSfn8ih0/FwVfm9mllXts5Uda5c8JQ:GiT0+RXaR6IqYKQnNmQlRts5Ugc8JQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efd99aa11e8ac9de709a702a21db7fbfb82072c4b0a423cbe71bb6f248d4c1ea.exe
Files
-
efd99aa11e8ac9de709a702a21db7fbfb82072c4b0a423cbe71bb6f248d4c1ea.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 881KB - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ