Static task
static1
Behavioral task
behavioral1
Sample
d1fea567a8f70a27799dc42d45e82b7363fd9fbc5544cf2a069e862c0a7f1226.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1fea567a8f70a27799dc42d45e82b7363fd9fbc5544cf2a069e862c0a7f1226.exe
Resource
win10v2004-20241007-en
General
-
Target
d1fea567a8f70a27799dc42d45e82b7363fd9fbc5544cf2a069e862c0a7f1226
-
Size
1.4MB
-
MD5
504b2968caf7aab3e6b6b22ae5c85648
-
SHA1
3d262c93d7910bd7354bac2e023eb0f2f8e3835c
-
SHA256
d1fea567a8f70a27799dc42d45e82b7363fd9fbc5544cf2a069e862c0a7f1226
-
SHA512
bb15d4bb166e60142a3c781a3b973b3021e9780a8e6f3ec8a2b1f205bc8f6edbe707b6ea9c3428be92fcfeb39ea123540ad7cf1fef33ad6efb298612c4f3f668
-
SSDEEP
24576:hRj8a4RlPXnRdkZvpBNeMBEVIMvnta6v1RIAhjLoamMiX4lNmZg0YxegPbUIDPP:hdP4jfRSZ8+2vnkSjLoyEkmZ9Y14
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1fea567a8f70a27799dc42d45e82b7363fd9fbc5544cf2a069e862c0a7f1226
Files
-
d1fea567a8f70a27799dc42d45e82b7363fd9fbc5544cf2a069e862c0a7f1226.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 638KB - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 771KB - Virtual size: 771KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ