Static task
static1
Behavioral task
behavioral1
Sample
efa80d35db452df70f3addd9d6565578ebf80276e06dd70af98a93cb5c086890.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efa80d35db452df70f3addd9d6565578ebf80276e06dd70af98a93cb5c086890.exe
Resource
win10v2004-20241007-en
General
-
Target
efa80d35db452df70f3addd9d6565578ebf80276e06dd70af98a93cb5c086890.exe
-
Size
78KB
-
MD5
9a412ac39baa32f0bfaa8191e951b5da
-
SHA1
8881fbf8cc4a33a8d067febb7df6e7d5a45e4548
-
SHA256
efa80d35db452df70f3addd9d6565578ebf80276e06dd70af98a93cb5c086890
-
SHA512
800f5155e2dd51df7051cdac16a73b1e57f270195d7f4c721935236744214cd4cedfc38283232a13a72a954482ea0ece7f44c06115f3330e0220e624f655050c
-
SSDEEP
1536:7zV5jS2vZv0kH9gDDtWzYCnJPeoYrGQtC6N9/M1+V9:nV5jS2l0Y9MDYrm719/f9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efa80d35db452df70f3addd9d6565578ebf80276e06dd70af98a93cb5c086890.exe
Files
-
efa80d35db452df70f3addd9d6565578ebf80276e06dd70af98a93cb5c086890.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ