Static task
static1
Behavioral task
behavioral1
Sample
12b416b5429b719231eb729b6bd602e69085677616cd47aa0595d42161d5a485N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12b416b5429b719231eb729b6bd602e69085677616cd47aa0595d42161d5a485N.exe
Resource
win10v2004-20241007-en
General
-
Target
12b416b5429b719231eb729b6bd602e69085677616cd47aa0595d42161d5a485N.exe
-
Size
584KB
-
MD5
488106a5ca274bef94d5dd8c8cd23060
-
SHA1
1e291b498ff752b54a93aeb70b0819d2f439b088
-
SHA256
12b416b5429b719231eb729b6bd602e69085677616cd47aa0595d42161d5a485
-
SHA512
507f8b16e4d015bb47ec9bab7c48a4be533b50987bd912fe487ae1c6bab2149c1cac12de12e8c57971147ac677daa7c828f5f878c0bfc55f6c44a882f1c35163
-
SSDEEP
12288:mqEfpOSxyOF6q/68tLZL+w2hK3x8HPObaoE3anW2YrdA:mqSOStFYA+Kh8HPObfEqner
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12b416b5429b719231eb729b6bd602e69085677616cd47aa0595d42161d5a485N.exe
Files
-
12b416b5429b719231eb729b6bd602e69085677616cd47aa0595d42161d5a485N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ