Static task
static1
Behavioral task
behavioral1
Sample
0d145776475200f49119bfb3ac7ac4dd4e20fadd0fd7b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d145776475200f49119bfb3ac7ac4dd4e20fadd0fd7b.exe
Resource
win10v2004-20240802-en
General
-
Target
0d145776475200f49119bfb3ac7ac4dd4e20fadd0fd7b.exe
-
Size
1.8MB
-
MD5
a3ab5f47e0a4d3728e16c3d90713c729
-
SHA1
46d41c79c6e04636a14b3a4c72f3d9b92bbd8ebc
-
SHA256
0d145776475200f49119bfb3ac7ac4dd4e20fadd0fd7be2a1791450070c13e59
-
SHA512
ae417c76bdab0757dfa4cef800ec7155f0470190b3ec5c23d6bb0453e863a6c771bd9c46611ef5bdbc7a2373b813ce5b2112fa0cf525bb9f4a79b31cc3eff650
-
SSDEEP
24576:IBRdEWBRGRBTgmco4yn5J1VWshHAsIqanmykclOegPYlOt6xJx/VDEkRChiecgWq:IBLmg7y5/xA3nmegoOt6LxdLRC0Xv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d145776475200f49119bfb3ac7ac4dd4e20fadd0fd7b.exe
Files
-
0d145776475200f49119bfb3ac7ac4dd4e20fadd0fd7b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ