Static task
static1
Behavioral task
behavioral1
Sample
1650cbb4c3d5383fead103e57fa8cd4fee4013bf5bf104c4fb5833044c1b5b6fN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1650cbb4c3d5383fead103e57fa8cd4fee4013bf5bf104c4fb5833044c1b5b6fN.exe
Resource
win10v2004-20240802-en
General
-
Target
1650cbb4c3d5383fead103e57fa8cd4fee4013bf5bf104c4fb5833044c1b5b6fN.exe
-
Size
2.7MB
-
MD5
d263f2b3aeb0cc349a96e9e25e0bb300
-
SHA1
a17d4d5b7f39ba90acb14f96f1ff649569859bee
-
SHA256
1650cbb4c3d5383fead103e57fa8cd4fee4013bf5bf104c4fb5833044c1b5b6f
-
SHA512
daf0a4586c9c45a4dd10f27ef534a2993bc2e1351bfc581b46c7f2122fd364e9797b4a61421c2961d0ea12086ce77907d1a2a00f7ff5b176506ef3931bc48540
-
SSDEEP
49152:9DyT+P66XbOP/ZzA2DItg1Hoaz6wecYfFkURwlhyAuLjf/IVgs5+xP:QTE66yXZ02DwUHoazRofxIhELjf/IVgs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1650cbb4c3d5383fead103e57fa8cd4fee4013bf5bf104c4fb5833044c1b5b6fN.exe
Files
-
1650cbb4c3d5383fead103e57fa8cd4fee4013bf5bf104c4fb5833044c1b5b6fN.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ