Static task
static1
Behavioral task
behavioral1
Sample
fd13024441db9f34dd57224f74ac037e0f51e90c935a08d7eebeb8a6beb94aa4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fd13024441db9f34dd57224f74ac037e0f51e90c935a08d7eebeb8a6beb94aa4.exe
Resource
win10v2004-20230703-en
General
-
Target
fd13024441db9f34dd57224f74ac037e0f51e90c935a08d7eebeb8a6beb94aa4
-
Size
1.6MB
-
MD5
0e2353916ee950f67cc7e920973201f5
-
SHA1
eadb3f6967382c94288a4315887e97275693c060
-
SHA256
fd13024441db9f34dd57224f74ac037e0f51e90c935a08d7eebeb8a6beb94aa4
-
SHA512
3bc40a68de7759e23054b05ea36a4d0a45920faa6f5d3300619d839fdabf936bfba7ffbb34dea68ecf1ce328009e440cafedb83601f9dcf32067c1f02cd35c26
-
SSDEEP
6144:VP9SaLxNpyz/4xtWpqseWRnb7/74ktyn4H4WVlhexArNr/PF/sCLGuLgTO05y0L7:VT1S7pq1sZGuLgTO05y0LQEzZq6lV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd13024441db9f34dd57224f74ac037e0f51e90c935a08d7eebeb8a6beb94aa4
Files
-
fd13024441db9f34dd57224f74ac037e0f51e90c935a08d7eebeb8a6beb94aa4.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 105.1MB - Virtual size: 105.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19.9MB - Virtual size: 19.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 455KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: 512B - Virtual size: 96B
.rodata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CPADinfo Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 875KB - Virtual size: 875KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ