Static task
static1
Behavioral task
behavioral1
Sample
2392583c488d5bb95ea7bd8f2f920fe27b2b27f6c1993606aca7be7cfe084d42.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2392583c488d5bb95ea7bd8f2f920fe27b2b27f6c1993606aca7be7cfe084d42.exe
Resource
win10v2004-20241007-en
General
-
Target
2392583c488d5bb95ea7bd8f2f920fe27b2b27f6c1993606aca7be7cfe084d42.exe
-
Size
756KB
-
MD5
11f939718d225d8b5acd79c434d3d9e0
-
SHA1
73ca32ce2bdd4b78bd096042407526ec19a22e8c
-
SHA256
2392583c488d5bb95ea7bd8f2f920fe27b2b27f6c1993606aca7be7cfe084d42
-
SHA512
b7941d5e1c98ef1d98f989cc6c6177de9efd823cae13fa9c0d3b40b05f52118194f0f2a9c151e419e86ec181e9381c0f104c4a92de57849057e9ad343055b4f9
-
SSDEEP
12288:l2+nSPz5JA/EME8jGql7WV1OaTpFJKoewYlfM9D9HFu4Q:noz5m/EJz+FaTEo7Yl4DPu4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2392583c488d5bb95ea7bd8f2f920fe27b2b27f6c1993606aca7be7cfe084d42.exe
Files
-
2392583c488d5bb95ea7bd8f2f920fe27b2b27f6c1993606aca7be7cfe084d42.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 753KB - Virtual size: 753KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ