Static task
static1
Behavioral task
behavioral1
Sample
090d1c1ca837eb2745f97b8779286b9d82ba1087c641e82f673c3da4462a6456.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
090d1c1ca837eb2745f97b8779286b9d82ba1087c641e82f673c3da4462a6456.exe
Resource
win10v2004-20240802-en
General
-
Target
090d1c1ca837eb2745f97b8779286b9d82ba1087c641e82f673c3da4462a6456
-
Size
599KB
-
MD5
d47b3fa2a504b69e68098da6497584ee
-
SHA1
78c41fb940b124b06fe9c4c4efe1e44747558763
-
SHA256
090d1c1ca837eb2745f97b8779286b9d82ba1087c641e82f673c3da4462a6456
-
SHA512
e32d0ad4350cc8c054f2e51d1ef4864f9c584e0fed8f60e1619541baef9472602a3e3e91f52f31d493b1893f66c452bfd7411b56538618bca2eaa4af03ddb02d
-
SSDEEP
12288:0YxVIy6TM3CsfhNVkOvFGTddLp7dqpJZ1Kywwg8S6ChD:5x2oCslFvcxR8prFgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 090d1c1ca837eb2745f97b8779286b9d82ba1087c641e82f673c3da4462a6456
Files
-
090d1c1ca837eb2745f97b8779286b9d82ba1087c641e82f673c3da4462a6456.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
azk< Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 447KB - Virtual size: 447KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ