Static task
static1
Behavioral task
behavioral1
Sample
3083a983eedc2a9ce3cbc0ad5b53db80c8c6f7aefac20e3396bd3dcec112f38bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3083a983eedc2a9ce3cbc0ad5b53db80c8c6f7aefac20e3396bd3dcec112f38bN.exe
Resource
win10v2004-20241007-en
General
-
Target
3083a983eedc2a9ce3cbc0ad5b53db80c8c6f7aefac20e3396bd3dcec112f38bN
-
Size
8.1MB
-
MD5
fbc7808dc619c553dff0d8c8fd3698a0
-
SHA1
57676d51ffe1ebfc434992a24c354792c8f8d062
-
SHA256
3083a983eedc2a9ce3cbc0ad5b53db80c8c6f7aefac20e3396bd3dcec112f38b
-
SHA512
b167b32db91b47f9bc0407fec8d397341b11c3227b6c1158562adbd5e34c1a334d8126a4a627162150a9e4d6ea37198454d287bfb14d375c3d46dfa9945839cc
-
SSDEEP
196608:C9x7Zeiy9x7ZeiT9x7ZeiH9x7Zeig9x7ZeignS:CHVDyHVDTHVDHHVDgHVDg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3083a983eedc2a9ce3cbc0ad5b53db80c8c6f7aefac20e3396bd3dcec112f38bN
Files
-
3083a983eedc2a9ce3cbc0ad5b53db80c8c6f7aefac20e3396bd3dcec112f38bN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ