Static task
static1
Behavioral task
behavioral1
Sample
40899d038ee717f6e407ed53668c8d16.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
40899d038ee717f6e407ed53668c8d16.exe
Resource
win10v2004-20230703-en
General
-
Target
40899d038ee717f6e407ed53668c8d16.exe
-
Size
542KB
-
MD5
40899d038ee717f6e407ed53668c8d16
-
SHA1
6f49f6ce4068524aab980fce4c85473f63415d5f
-
SHA256
d0d417ece8e94dbb4834e29c345d2e05de5de8ba3b3e05d922614c6f508d4cbe
-
SHA512
b7e8de2f51c235adc3243781b797663de6557acb8ecee58310a9944a199b2ae0c38663e0b97f77477ea850439d45dbdff11fb8cfcfb4fc9c58442c965999c389
-
SSDEEP
12288:FVcSX+wMmdF1/jILYCWilocbzK27bwgTysayxbLz7ms4u6m7PH1:FVcSX+wrd/r3IO2g06Pg/1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40899d038ee717f6e407ed53668c8d16.exe
Files
-
40899d038ee717f6e407ed53668c8d16.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 539KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ