Static task
static1
Behavioral task
behavioral1
Sample
168f80964118bee160ec1c0543f456f1873dca4271e9a2e0d597c651f09a3a6f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
168f80964118bee160ec1c0543f456f1873dca4271e9a2e0d597c651f09a3a6f.exe
Resource
win10v2004-20241007-en
General
-
Target
168f80964118bee160ec1c0543f456f1873dca4271e9a2e0d597c651f09a3a6f
-
Size
1.4MB
-
MD5
c6489cef651f7a6f4d9334e8c5624c21
-
SHA1
3f1f9fc649071b90b720a636263db06688d8c335
-
SHA256
168f80964118bee160ec1c0543f456f1873dca4271e9a2e0d597c651f09a3a6f
-
SHA512
d59ee398cc765103e5c536da4ee1342583960d002d01fe7cd453813abeb4133ae5445fe75a3870f11e972c38c485fdc8cbf0b7a43d33abd423f5765a23de1bab
-
SSDEEP
24576:v4oq2YnZDCgAHGrwKCY+B9TwP5pxnjRcwhbk2Sxv1RIAhjLoamMiX4lNmZg0YxeY:v/q2YnIdHOC198xvjRRFk2SXjLoyEkmL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 168f80964118bee160ec1c0543f456f1873dca4271e9a2e0d597c651f09a3a6f
Files
-
168f80964118bee160ec1c0543f456f1873dca4271e9a2e0d597c651f09a3a6f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 642KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 771KB - Virtual size: 771KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ