Static task
static1
Behavioral task
behavioral1
Sample
71664ca9b4d0ca2030a0bb792ae8d6c6791fb57f71ed061899af6dda9c06630a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
71664ca9b4d0ca2030a0bb792ae8d6c6791fb57f71ed061899af6dda9c06630a.exe
Resource
win10v2004-20230220-en
General
-
Target
71664ca9b4d0ca2030a0bb792ae8d6c6791fb57f71ed061899af6dda9c06630a
-
Size
2.4MB
-
MD5
22e3e2cd29464e9bd0a377c8d5e1f049
-
SHA1
4a3528be37db1c17e7a35e80e4ce3428acc5c345
-
SHA256
71664ca9b4d0ca2030a0bb792ae8d6c6791fb57f71ed061899af6dda9c06630a
-
SHA512
e155e14e584e1a4641b85bd9d3a398b3b7abc6d86208a5e322bdd1747d1ae041f15a487ddb8d1ac7147d1b69e06ad3e5895abfe2cc9e532329d9f455f43baed2
-
SSDEEP
24576:W12+qdrzi/y4grJ3uC3OSCxE+4WS8+04svlvmLBQLQtv2NfQSA5W1JYLKFXY/TRl:gnK0OyEZV4AQxQSoK+TRNlUi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71664ca9b4d0ca2030a0bb792ae8d6c6791fb57f71ed061899af6dda9c06630a
Files
-
71664ca9b4d0ca2030a0bb792ae8d6c6791fb57f71ed061899af6dda9c06630a.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ