Static task
static1
Behavioral task
behavioral1
Sample
ef2901b1d53098be31ed3e17179e697654b2bddaa6d4d679f6d668c5c5f934f7N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef2901b1d53098be31ed3e17179e697654b2bddaa6d4d679f6d668c5c5f934f7N.exe
Resource
win10v2004-20240802-en
General
-
Target
ef2901b1d53098be31ed3e17179e697654b2bddaa6d4d679f6d668c5c5f934f7N
-
Size
130KB
-
MD5
f39b5007db2c604be5b0aa47fa9efda0
-
SHA1
1f180793b83d9f8a7966059553f8bdd281b0af7c
-
SHA256
ef2901b1d53098be31ed3e17179e697654b2bddaa6d4d679f6d668c5c5f934f7
-
SHA512
a06c4177a08b65019f7bd91d0117182f82cda0cbce579f10ee551a3dd676761dc4328f13311044395af516bff1357a464e0aa7d68848c6655f5a5dd93f45f143
-
SSDEEP
768:8RSNNlodpEYcBDwVKrJLcdIFN+y3C6mTGep2UZEccJAPfTYolQ7eB8pGIy0O8y1C:LNNlmXiK8N+yS6mQQSUIXryCSwOJo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef2901b1d53098be31ed3e17179e697654b2bddaa6d4d679f6d668c5c5f934f7N
Files
-
ef2901b1d53098be31ed3e17179e697654b2bddaa6d4d679f6d668c5c5f934f7N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ