Static task
static1
Behavioral task
behavioral1
Sample
a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673N.exe
Resource
win10v2004-20241007-en
General
-
Target
a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673N
-
Size
78KB
-
MD5
b384eafb7f17622515730a4e3caf1ed0
-
SHA1
a4924fbff76142e52e4942d7fc902d7bcf3fb404
-
SHA256
a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673
-
SHA512
fb6a56b2960c9c17c0f03f619270ac57b6f32bce688f346fcf2557ce00b761e98f8560ac54554dcf30df491491a454ceb2c1f7268743fbd949b3d8f5eec88393
-
SSDEEP
1536:/CHF3JIfpJywt04wbje37TazckwzW4UfSqRovPtoY0BQte49/f1gB:/CHF5IhJywQj2TLo4UJuXHhe49/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673N
Files
-
a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ