Static task
static1
Behavioral task
behavioral1
Sample
f655b29acc122c22ffd6dae267587ee9f14d4a639a3923f10fbc122ce51b97eb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f655b29acc122c22ffd6dae267587ee9f14d4a639a3923f10fbc122ce51b97eb.exe
Resource
win10v2004-20241007-en
General
-
Target
f655b29acc122c22ffd6dae267587ee9f14d4a639a3923f10fbc122ce51b97eb.exe
-
Size
296KB
-
MD5
866251c29ce220808c68710838c4ed0e
-
SHA1
c052f42097c404484219c2a8a7830d1c8d566161
-
SHA256
f655b29acc122c22ffd6dae267587ee9f14d4a639a3923f10fbc122ce51b97eb
-
SHA512
befdad5d56f9f6f7de102df5e8be857b183142611a5419f8fbf00861e5faf3fbcb68aed03dc556c3255919dc5c200080144c6b51229c4c116e555f5f37f971cf
-
SSDEEP
768:+h6X/EWNG6+DG9PG1INeBU09m4ukw6nbi/bUibwp4JDeDYISywilKFtf5vLAY1RS:+hoEWHNeBU09kHsi/X7N6aRMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f655b29acc122c22ffd6dae267587ee9f14d4a639a3923f10fbc122ce51b97eb.exe
Files
-
f655b29acc122c22ffd6dae267587ee9f14d4a639a3923f10fbc122ce51b97eb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ