Static task
static1
Behavioral task
behavioral1
Sample
SPL_424124000000000000000000000003535352424.exe
Resource
win7-20230220-en
General
-
Target
SPL_424124000000000000000000000003535352424.gz
-
Size
450KB
-
MD5
12f47b6b68d28244451d9d736f05485f
-
SHA1
c3a83dfd56de1421c53e527ba5befa4371eb332a
-
SHA256
110f2f8012bbb0683a0ca814b9abf1df4de059c97550729adc998d3419ff03a0
-
SHA512
588b20039fd7822d248af0ae238b4f4859ce63bc4dc2b8d668557cc0d1b6b5438787093d2ba307700048099bc4edf306363752b98552d5b580c04d5cfa665053
-
SSDEEP
12288:VC5r0+LGDJDuyZkg44OY3gnNK84sV+gQ9lIppCTLJWBMRRJWC:VCNLWJDcJ/NKqnQ8EQiRR4C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SPL_424124000000000000000000000003535352424.exe
Files
-
SPL_424124000000000000000000000003535352424.gz.rar
-
SPL_424124000000000000000000000003535352424.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ