Static task
static1
Behavioral task
behavioral1
Sample
r4824_230523090902_001.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
r4824_230523090902_001.exe
Resource
win10v2004-20230220-en
General
-
Target
r4824_230523090902_001.exe
-
Size
787KB
-
MD5
2245ba729d9b9cb1ee2be35a736ddc41
-
SHA1
d12a969dab1cb385fd34593759c923cd48cc55c0
-
SHA256
8e6de0048abf36ec04607f8277fe0c3ce7e9232d4147bdeb8b214d49d19091c7
-
SHA512
76fdba21127aa352d5ce9347530a237764222ec76e7bef17c0603a242c72afcebd0529e101e996ccab4a54600ecccaeda256f302cd47dce4104695cbdef1e425
-
SSDEEP
12288:ZsFbsfI8Z1gMFVobi/WYYZH6Ir293sb+Sei4NZwiiM4kFeK/fVTdHxcRNwS5q:Z0bsfI6dFqbLMIr2VUf4NfR4WNTD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource r4824_230523090902_001.exe
Files
-
r4824_230523090902_001.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 784KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ