Static task
static1
Behavioral task
behavioral1
Sample
864b19aacbc59643349d7f9911fd58d8cc851326a5e19eadc31a4f85ccb41dee.exe
Resource
win7-20230831-en
General
-
Target
864b19aacbc59643349d7f9911fd58d8cc851326a5e19eadc31a4f85ccb41dee
-
Size
7.3MB
-
MD5
c1d22d64c028c750f90bc2e763d3535c
-
SHA1
4403b1cdfb2fd7ecfba5b8e9cda93b6132accd49
-
SHA256
864b19aacbc59643349d7f9911fd58d8cc851326a5e19eadc31a4f85ccb41dee
-
SHA512
dce11fef1eba295889fc25f57f8b1b903ad23eee5106fcac10d950ec6d56b813df2f9da549c184430df8ccf1ee9e3c2281f0fa4ba9e021c0138c0f8361004ed5
-
SSDEEP
98304:T9lt4KIw0IWyUok01/Mk0fRg1YWIel3ZjmvrLF3mMS1FnYgJW1kAOgh:T9lWmBUoP1kT5yXIe9KFrS13W1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 864b19aacbc59643349d7f9911fd58d8cc851326a5e19eadc31a4f85ccb41dee
Files
-
864b19aacbc59643349d7f9911fd58d8cc851326a5e19eadc31a4f85ccb41dee.exe windows x64
f809fc88afb376c33809e67d73924da3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
user32
UpdateWindow
advapi32
RegCloseKey
shell32
ShellAboutA
Sections
Size: - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 442KB - Virtual size: 971KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE