Static task
static1
Behavioral task
behavioral1
Sample
1476cbfcafee92e5c574dfab4319af35dddcbd9c4f29e8d4b6f5841a396d7946.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1476cbfcafee92e5c574dfab4319af35dddcbd9c4f29e8d4b6f5841a396d7946.exe
Resource
win10v2004-20230703-en
General
-
Target
1476cbfcafee92e5c574dfab4319af35dddcbd9c4f29e8d4b6f5841a396d7946
-
Size
9.8MB
-
MD5
a18e1d990970872949c6904e03bc538e
-
SHA1
81575c0f756e58830d7dc9928d14a1be2d1924e5
-
SHA256
1476cbfcafee92e5c574dfab4319af35dddcbd9c4f29e8d4b6f5841a396d7946
-
SHA512
25ce0077c857eac5c25eee264242acbac288cd8033d4607669bb0ec9bdb300dfaff073503bda5b4f6287574877e704d915630051825093c0273ee1eca17c47c8
-
SSDEEP
196608:j+2VXv37Gj9SPojO8xrCKWB5ozi93iKqp2IsVwc3d3bSPOQYooBb85Q0C:a6boq8xriB5ozi9Y36RpAOnooBo5xC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1476cbfcafee92e5c574dfab4319af35dddcbd9c4f29e8d4b6f5841a396d7946
Files
-
1476cbfcafee92e5c574dfab4319af35dddcbd9c4f29e8d4b6f5841a396d7946.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 666KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 3.1MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 96KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ