Static task
static1
Behavioral task
behavioral1
Sample
414a0bf51ee426a007c528ecb84a563f21c40f3a2feb06485baad0e8ab439adf.exe
Resource
win7-20230220-en
General
-
Target
414a0bf51ee426a007c528ecb84a563f21c40f3a2feb06485baad0e8ab439adf.bin
-
Size
3.2MB
-
MD5
31f8c08862caa2ec10a82867dbdf188b
-
SHA1
144d1037d253808aae23d2fa14d930a76bc7ad51
-
SHA256
414a0bf51ee426a007c528ecb84a563f21c40f3a2feb06485baad0e8ab439adf
-
SHA512
52288d822170c3d813258ed63d97975f5f3f6c0f0d3238fe54a38cfa80f8c675efec3d2ea3a23b15f6d37408f7419f5b17e28970116f919273451190f587083f
-
SSDEEP
49152:CC9i1Db4FFMmKLZi9gOzDx8iE66tfvbFDfgC0JaRYHw3pjLMRzJwWlo1a4/0fH:xwF4FjGOzF8iAtbFDV0JaRm9RzJGkJv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 414a0bf51ee426a007c528ecb84a563f21c40f3a2feb06485baad0e8ab439adf.bin
Files
-
414a0bf51ee426a007c528ecb84a563f21c40f3a2feb06485baad0e8ab439adf.bin.exe windows x64
79b3362178937bf9559741c46bb9e035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.MPRESS1 Size: 3.2MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE