Static task
static1
Behavioral task
behavioral1
Sample
5162e471f2984ca8bcc7a99ccc90f1019f6460da2700c0ed9fe81e52f773d7eeN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5162e471f2984ca8bcc7a99ccc90f1019f6460da2700c0ed9fe81e52f773d7eeN.exe
Resource
win10v2004-20241007-en
General
-
Target
5162e471f2984ca8bcc7a99ccc90f1019f6460da2700c0ed9fe81e52f773d7eeN
-
Size
224KB
-
MD5
9f9fe13b721caf99501f811dd6aa7720
-
SHA1
6e5086eabd3b57c59c7339913cc498c3478b37e1
-
SHA256
5162e471f2984ca8bcc7a99ccc90f1019f6460da2700c0ed9fe81e52f773d7ee
-
SHA512
0c496d56bb2fd7f5478b4c7aeabb225e4d4a7f0f802c95e6b3584bea6f3b0fa3a88972308063650033eb1fc2c177f526c6fd787007e6466ff44d29d2780010b3
-
SSDEEP
3072:YsXRmUIMitiMQose27vc+Eld+xZp2vPRL1tT06zJoxAWBcKpSP//dwRmIBj:ZR5IuMQoseGk7RZBGxAycKpSPX2V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5162e471f2984ca8bcc7a99ccc90f1019f6460da2700c0ed9fe81e52f773d7eeN
Files
-
5162e471f2984ca8bcc7a99ccc90f1019f6460da2700c0ed9fe81e52f773d7eeN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ