Static task
static1
Behavioral task
behavioral1
Sample
de5c622cfe7d68e938956a51427387824c7b6835ce556c2e0d82dc957ac2efe5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de5c622cfe7d68e938956a51427387824c7b6835ce556c2e0d82dc957ac2efe5.exe
Resource
win10v2004-20241007-en
General
-
Target
de5c622cfe7d68e938956a51427387824c7b6835ce556c2e0d82dc957ac2efe5
-
Size
889KB
-
MD5
9bec01344238221e7fa48083ecb7339e
-
SHA1
eb592b4892e0217f0893a6f3556bea78abdb51b8
-
SHA256
de5c622cfe7d68e938956a51427387824c7b6835ce556c2e0d82dc957ac2efe5
-
SHA512
f7aaf35ebf91e42742993371ae6001997beb87cca44a0bf8320ba8555eee93f5bc3c2bac489d8b08373d3b04fd7f0b0170859e2bbfb37b0d4a7820b083d10187
-
SSDEEP
12288:ScsCELA+12Hd5lpvS36pDfi/xN3xNBzqhVzxWWEjZPvp9ZD3K24G0Qvba1y2moMU:wzqfzxWRjZP3ZD3D4lQt6voB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de5c622cfe7d68e938956a51427387824c7b6835ce556c2e0d82dc957ac2efe5
Files
-
de5c622cfe7d68e938956a51427387824c7b6835ce556c2e0d82dc957ac2efe5.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 872KB - Virtual size: 871KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ