Static task
static1
Behavioral task
behavioral1
Sample
AR_82852_4.EXE.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
AR_82852_4.EXE.exe
Resource
win10v2004-20230621-en
General
-
Target
AR_82852_4.EXE.exe
-
Size
336KB
-
MD5
3d4c742966d6cf893bb4ad82a545aba7
-
SHA1
abfcfd2f89c574310998e593e677c6fa43d58148
-
SHA256
b21e8141551b67b0f3e8ccbd0a543b70c64b9a1dad7c7b6874b424da7e217d1e
-
SHA512
5702ea89deafd133c0b469e3dd1f281805ad7dda4d70912a744643b50e2712048c3a338e6cd9700b4bac01996245fade51d5c39fe602f1e2ef651b391db8accc
-
SSDEEP
6144:YIK/H8pxWo3YHc4er3Ue6+yrEZ4eHEZ4ew:3OLczM/s3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AR_82852_4.EXE.exe
Files
-
AR_82852_4.EXE.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ