Static task
static1
Behavioral task
behavioral1
Sample
SPL_424124000000000000000000000003535352424.exe
Resource
win7-20230220-en
General
-
Target
SPL_424124000000000000000000000003535352424.exe
-
Size
477KB
-
MD5
eefd4b5942918cb60fa67688a5b9daff
-
SHA1
e72787e84b076af873f3cdb95311bdbdbd4bb5a6
-
SHA256
8eff64e676cadfa4c3f40bbc38e92d46c8f6f4d487e94d80f56d543ccc6004ac
-
SHA512
fe54773a02bfe7129c7e33851bb4171f2fe141baf085b234306da4d8c4c67aed348a979fd7466c0c263ee43422c66cbb8646b033fc400694a5bd52ec4f55b1e8
-
SSDEEP
12288:xNf4ypufQZaYSyHKaFBZvDepNiqdY7195Ooc:zge+QZvSSbbZL1qS716
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SPL_424124000000000000000000000003535352424.exe
Files
-
SPL_424124000000000000000000000003535352424.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ