Static task
static1
Behavioral task
behavioral1
Sample
1af10fb30ad2ab965d77ba07ee1251ed8807cb468e8d8f5e4d63637f546c8afc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1af10fb30ad2ab965d77ba07ee1251ed8807cb468e8d8f5e4d63637f546c8afc.exe
Resource
win10v2004-20241007-en
General
-
Target
1af10fb30ad2ab965d77ba07ee1251ed8807cb468e8d8f5e4d63637f546c8afc
-
Size
736KB
-
MD5
a170fa9d0d0380c62202a17b02e906c2
-
SHA1
19147aa921aa7846cb4e7d21b14486897e5d618a
-
SHA256
1af10fb30ad2ab965d77ba07ee1251ed8807cb468e8d8f5e4d63637f546c8afc
-
SHA512
8281fefbd7af257aa9819546c17fb90b015937165a7e7c0d0fc541f701b4fa3639cd0a4df8c62c51efd6537e392a5a363fb2cd2db3a55a3e563cb2135e56281c
-
SSDEEP
12288:/Gwcr1EOGQyypkxbnZfvRWFybdc1l2X8v5dGrOywiVMRG7:/UbpcdHRgMdcX2MvTGg48y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1af10fb30ad2ab965d77ba07ee1251ed8807cb468e8d8f5e4d63637f546c8afc
Files
-
1af10fb30ad2ab965d77ba07ee1251ed8807cb468e8d8f5e4d63637f546c8afc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 630KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ