Static task
static1
Behavioral task
behavioral1
Sample
r_________24530719______________.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
r_________24530719______________.exe
Resource
win10v2004-20230220-en
General
-
Target
r_________24530719______________.exe
-
Size
2.0MB
-
MD5
7819152e0f25ab09c1e468888349da8f
-
SHA1
08113bbf5d6e346f433496526bd190489c4d2afc
-
SHA256
3cc2f46e36577be2638cee152ef4c7500f50c5d403c34a7b37e90734f754b013
-
SHA512
01fb87293989be992f79e628f6b2ea046356d2fd6328f10a1fdf780cd2b0fd813244a2699b2b39672c8a168cdb7ebd9d749263c1338d694090996da42234935d
-
SSDEEP
24576:z0onmNyoIJV6Q8ISJ28zcRBcG+r8h1tuXwNp3La5cLyH7BMnnPH0Syl3f4v:PnoyoWrAnzcL+gh12wNQ57HKPHDyB6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource r_________24530719______________.exe
Files
-
r_________24530719______________.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ