Static task
static1
Behavioral task
behavioral1
Sample
a5ba47684fd3e0b7f1f416b47725fcef46ee8d6c7ef1998dcbb264360440f5c8N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a5ba47684fd3e0b7f1f416b47725fcef46ee8d6c7ef1998dcbb264360440f5c8N.exe
Resource
win10v2004-20240802-en
General
-
Target
a5ba47684fd3e0b7f1f416b47725fcef46ee8d6c7ef1998dcbb264360440f5c8N
-
Size
18KB
-
MD5
46c72432aff00ef25df925b6b6eb5c00
-
SHA1
dc1756485f2f2453c8b6c62009b0e169ae6e8db3
-
SHA256
a5ba47684fd3e0b7f1f416b47725fcef46ee8d6c7ef1998dcbb264360440f5c8
-
SHA512
a39c95f0a88915407f9afc6712c0850e8a0b0f6773c3e3a68b7e1b029d306f4d4cd27c531495f3ae538a329f4f7d97357741b976702cf1fdda4927a7b62de0db
-
SSDEEP
384:AE2JmMG/aJvIF6uIm9U2qQYXwjYD0EUZhmeTkK6aHv+a:8IMG/aGFrIm9UNpXwW0E6NTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5ba47684fd3e0b7f1f416b47725fcef46ee8d6c7ef1998dcbb264360440f5c8N
Files
-
a5ba47684fd3e0b7f1f416b47725fcef46ee8d6c7ef1998dcbb264360440f5c8N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ