Static task
static1
Behavioral task
behavioral1
Sample
TKq18zZ3Rtcbhfd.exe
Resource
win7-20240903-en
General
-
Target
190df53d774c520a1ad8bd531f990aede256f9b85900e22823f04a7b07df4166.rar
-
Size
595KB
-
MD5
b3e869364a6ab0983753473a265123ec
-
SHA1
651dc21fdeef1366824e9c9268e172417a51619f
-
SHA256
190df53d774c520a1ad8bd531f990aede256f9b85900e22823f04a7b07df4166
-
SHA512
239bb9a2ef12bc198a5af52359d6038850e0f526d9bdb4aed3205aa037bcc75ecafed68ce28cbdc6ad79374d873e7fbcbd7c7353121016c25df3fa06d777ef2f
-
SSDEEP
12288:wi+hF/G8so8MxWdBTNb9E0RYd63+JSi8pVHmE2N8RMU7Mh7RvwjFA:wi+hF/G8l5xqNbe/8pVGETyX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TKq18zZ3Rtcbhfd.exe
Files
-
190df53d774c520a1ad8bd531f990aede256f9b85900e22823f04a7b07df4166.rar.rar
-
TKq18zZ3Rtcbhfd.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 680KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ