Static task
static1
Behavioral task
behavioral1
Sample
856e25b58150a28a36cc198e31d99219a95b3ec18b4564a1fd67c847d92dac5f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
856e25b58150a28a36cc198e31d99219a95b3ec18b4564a1fd67c847d92dac5f.exe
Resource
win10v2004-20240802-en
General
-
Target
856e25b58150a28a36cc198e31d99219a95b3ec18b4564a1fd67c847d92dac5f
-
Size
20KB
-
MD5
e793c2f123e77c822347a6f338f7cd6d
-
SHA1
9bf4910be26e894fc7f89a8ff5f7f43ee511b0b2
-
SHA256
856e25b58150a28a36cc198e31d99219a95b3ec18b4564a1fd67c847d92dac5f
-
SHA512
5c6128005c44e38be078e92dbe44f0d5a81b6d9e30f7329be81438b5e332594faac12eda007b488aa4e8aef2423a9ee821bca9c5d7e00f4d42bd22679f7fab30
-
SSDEEP
192:AL4sCSj857FzVynlYJLLLT9pBfEdt+4xUmDZ01qvy5zmnnou9jcmTHDsY2m4sW:AL4vSu5xPLTVfmxUmDZ01qCU72
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 856e25b58150a28a36cc198e31d99219a95b3ec18b4564a1fd67c847d92dac5f
Files
-
856e25b58150a28a36cc198e31d99219a95b3ec18b4564a1fd67c847d92dac5f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ