Static task
static1
Behavioral task
behavioral1
Sample
5f2b5d6de0ea3b2a0bce76b2279d4ead77c9e981c365f88f09daecd66dc62044N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5f2b5d6de0ea3b2a0bce76b2279d4ead77c9e981c365f88f09daecd66dc62044N.exe
Resource
win10v2004-20240802-en
General
-
Target
5f2b5d6de0ea3b2a0bce76b2279d4ead77c9e981c365f88f09daecd66dc62044N
-
Size
923KB
-
MD5
0fa610a300115e3523af88e074c743d0
-
SHA1
0f52a8b58ccb11e5521951fc1b9d4dfb0b486901
-
SHA256
5f2b5d6de0ea3b2a0bce76b2279d4ead77c9e981c365f88f09daecd66dc62044
-
SHA512
7f132707ac4c8298ff3f1f862e410ef897e26ca31f99fb2eb79bd1e14846c34f1e893b5df0ca7271ba6428739235433e00d4ea320333d77d4aae1608465b5aec
-
SSDEEP
768:5RdutBr/u3GduUrRTj8ObyVUBMfSDFTh0lrpcxNq3ey16HMV1Iu3MCBo6qstNpzJ:5R4HmK3Tj8J4FPHMV1tNRLbwCX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f2b5d6de0ea3b2a0bce76b2279d4ead77c9e981c365f88f09daecd66dc62044N
Files
-
5f2b5d6de0ea3b2a0bce76b2279d4ead77c9e981c365f88f09daecd66dc62044N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 679KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ