Static task
static1
Behavioral task
behavioral1
Sample
656bc0efc8b14ea94197e1533051340c65a6134b18fd704009bd435556a9a2dc.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
656bc0efc8b14ea94197e1533051340c65a6134b18fd704009bd435556a9a2dc.exe
Resource
win10v2004-20240802-en
General
-
Target
656bc0efc8b14ea94197e1533051340c65a6134b18fd704009bd435556a9a2dc
-
Size
297KB
-
MD5
6c3e40634bf81b6f7f6d5272d649043f
-
SHA1
f88561b6af5f17bb16881fa95a2a92bc9fa65547
-
SHA256
656bc0efc8b14ea94197e1533051340c65a6134b18fd704009bd435556a9a2dc
-
SHA512
5e5a92bbb4c4d489a41bff87b7ce51a72202e938a984187071ea2d8474ace8fcab1008e76d2286faed74f926e9126caad7e7d57cca1a57e9bea412299e223bf7
-
SSDEEP
6144:S1Di3tE5Vdisuei38nZtKtGxVYFW3BRwoxD:EaJei34ZxEWBeop
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 656bc0efc8b14ea94197e1533051340c65a6134b18fd704009bd435556a9a2dc
Files
-
656bc0efc8b14ea94197e1533051340c65a6134b18fd704009bd435556a9a2dc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ