Static task
static1
Behavioral task
behavioral1
Sample
e0418a4a1dce4cda56ec9bfab6c1701e3f6a1fceeed0a51594f940bab31c1f78N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e0418a4a1dce4cda56ec9bfab6c1701e3f6a1fceeed0a51594f940bab31c1f78N.exe
Resource
win10v2004-20240802-en
General
-
Target
e0418a4a1dce4cda56ec9bfab6c1701e3f6a1fceeed0a51594f940bab31c1f78N
-
Size
729KB
-
MD5
d540a07397944a2d63749dfed5bb7620
-
SHA1
302535d32aa95e48a4bedf51c05bbc9b59794d83
-
SHA256
e0418a4a1dce4cda56ec9bfab6c1701e3f6a1fceeed0a51594f940bab31c1f78
-
SHA512
9fce6e1f92dfec76be4009a200ff69a0524cbbdb196c0893474260c99b6f60998675a5432538a3b4bf1b436519eb911308a2c765032cd5415f5c73be86755127
-
SSDEEP
12288:gj2G4FVeBr0t4VH5Z1aCA+gtuzikBd7sMkLqClFAd4NhJtUmlEiK/PFannLq7NV8:v/V8cA/B0dlFVDUHiK/P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e0418a4a1dce4cda56ec9bfab6c1701e3f6a1fceeed0a51594f940bab31c1f78N
Files
-
e0418a4a1dce4cda56ec9bfab6c1701e3f6a1fceeed0a51594f940bab31c1f78N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 703KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ