Static task
static1
Behavioral task
behavioral1
Sample
609bc8857b533519f685c40d62946fd27c4a4a0a87f8b05a8a5351fcfb7f5213.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
609bc8857b533519f685c40d62946fd27c4a4a0a87f8b05a8a5351fcfb7f5213.exe
Resource
win10v2004-20240802-en
General
-
Target
609bc8857b533519f685c40d62946fd27c4a4a0a87f8b05a8a5351fcfb7f5213.exe
-
Size
352KB
-
MD5
a011e4e8e7502fdfcd1c52a98392ff46
-
SHA1
7c3296fb62589aa96fd98322ab7f06d08b91d2b8
-
SHA256
609bc8857b533519f685c40d62946fd27c4a4a0a87f8b05a8a5351fcfb7f5213
-
SHA512
4c46f1b72c2cb34f3c1457eddab1ee3d4941cc8dfcdd29100f9c37c8f58d157ba0efe2b6c8e1acab575b1d1247b73523f3273cfc4d5bb3b7ddb0bca5cb813558
-
SSDEEP
6144:BNhml+X6KbXvpbTZhr/ZUX139gvlaNso:BNhmb8vpbVhrWX1397N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 609bc8857b533519f685c40d62946fd27c4a4a0a87f8b05a8a5351fcfb7f5213.exe
Files
-
609bc8857b533519f685c40d62946fd27c4a4a0a87f8b05a8a5351fcfb7f5213.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 238KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ