Static task
static1
Behavioral task
behavioral1
Sample
-5kOa04HngN_uuWp-JabSOnRD0m7_QIqK42a6ubjT3w.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
-5kOa04HngN_uuWp-JabSOnRD0m7_QIqK42a6ubjT3w.exe
Resource
win10v2004-20241007-en
General
-
Target
-5kOa04HngN_uuWp-JabSOnRD0m7_QIqK42a6ubjT3w.bin
-
Size
195KB
-
MD5
4fcf27b194d0997483c980ad25f1683d
-
SHA1
e131dc4b02849d099b277c0af6fba06ac4d11c61
-
SHA256
ff990e6b4e079e037ebae5a9fc969b48e9d10f49bbf9022a2b8d9aeae6e34f7c
-
SHA512
78cb6bf0f768a42f8a403c2e0d624f6dcc9226ef67175b6ea1cbb56d405457d181a9959e4bead79cfc91392a5762c3cfd8d3f726e6202ac7ba6939e7ad5f4f1b
-
SSDEEP
6144:xCvif6qyi8k+aL8P6MOMNzGuaqNdZ379ex+TueS:xkiA6GzG3v+69
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource -5kOa04HngN_uuWp-JabSOnRD0m7_QIqK42a6ubjT3w.bin
Files
-
-5kOa04HngN_uuWp-JabSOnRD0m7_QIqK42a6ubjT3w.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ