Static task
static1
Behavioral task
behavioral1
Sample
14e53781d3f0190f23f52f54602f1e8af626b09c0fa4e27c9603d49768d53537.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
14e53781d3f0190f23f52f54602f1e8af626b09c0fa4e27c9603d49768d53537.exe
Resource
win10v2004-20230703-en
General
-
Target
14e53781d3f0190f23f52f54602f1e8af626b09c0fa4e27c9603d49768d53537
-
Size
4.2MB
-
MD5
46c4c4c94661bf0ca4426855237a4a00
-
SHA1
c3eefd8a02936eda15108f9beeb457954dde6e3f
-
SHA256
14e53781d3f0190f23f52f54602f1e8af626b09c0fa4e27c9603d49768d53537
-
SHA512
224ea976ba764381153f5f0343c99d160df55a52d252608b86300165ca5fa5d43013810a5cee43d8820e594713ccb957d9d633f859850b1fc08dd1fa9cd991c0
-
SSDEEP
98304:nPZHx38eaTt8/nfPW0fYrdYUbj5/3dYr:RHt7TW0Yd/q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e53781d3f0190f23f52f54602f1e8af626b09c0fa4e27c9603d49768d53537
Files
-
14e53781d3f0190f23f52f54602f1e8af626b09c0fa4e27c9603d49768d53537.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.7MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.5MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ