Static task
static1
Behavioral task
behavioral1
Sample
d1845acdcf7febb9cc00c17fe8fb3cf1cba02cecd2aa3555e3ca80a18c46e5dd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d1845acdcf7febb9cc00c17fe8fb3cf1cba02cecd2aa3555e3ca80a18c46e5dd.exe
Resource
win10v2004-20230831-en
General
-
Target
d1845acdcf7febb9cc00c17fe8fb3cf1cba02cecd2aa3555e3ca80a18c46e5dd
-
Size
4.8MB
-
MD5
db1a1937e8e4900c33e4ed06418ca3d6
-
SHA1
e7b3ae6e1074ea0dc8cff67d184a804a390d973a
-
SHA256
d1845acdcf7febb9cc00c17fe8fb3cf1cba02cecd2aa3555e3ca80a18c46e5dd
-
SHA512
b0512a4a4517e0fd48ae9718a62aef261cd7e0c51d6582688281230c4d9395c7d8bc34785615c26af83152c86dfca5a5cdf4dd2b78382b1e2fbceb83e6b6d5c6
-
SSDEEP
98304:Uk/BMu61hRJpebKpxNkoN+2MrWbkRHNUres9RGcGAc/PWJg4D5NZYARdGeGY2:p/+V1hRvxNYrcaWSs9RGcrcntKNZNSec
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1845acdcf7febb9cc00c17fe8fb3cf1cba02cecd2aa3555e3ca80a18c46e5dd
Files
-
d1845acdcf7febb9cc00c17fe8fb3cf1cba02cecd2aa3555e3ca80a18c46e5dd.exe windows x64
7ddd93a96d9546e8c0aaf9408f3c7910
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
advapi32
RegisterEventSourceA
user32
OffsetRect
shell32
SHGetDiskFreeSpaceExW
Sections
Size: - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE