Static task
static1
Behavioral task
behavioral1
Sample
04901726ecedb76af42b8adff3c3d24ac74ef29bab918ef6454602a0b30a428d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
04901726ecedb76af42b8adff3c3d24ac74ef29bab918ef6454602a0b30a428d.exe
Resource
win10v2004-20230915-en
General
-
Target
04901726ecedb76af42b8adff3c3d24ac74ef29bab918ef6454602a0b30a428d
-
Size
7.1MB
-
MD5
7398774439f21783984110b3aaa0be4e
-
SHA1
0d27c70b51a5bc17135df5f37c8f1741c8aa1ce5
-
SHA256
04901726ecedb76af42b8adff3c3d24ac74ef29bab918ef6454602a0b30a428d
-
SHA512
dc93f142914a3d5ae2b0e09a6481bba63e068da4d1301012ef428f97ccc98deb923d5d3b9c2c77438cb98887bc33c67ea2b23eed87998c85440923284ffd9c20
-
SSDEEP
196608:3QYKUIimtkTeXDbTMZ/52AadO3Z4SC4aW16nK:5Iii3MlFaM35CrNn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04901726ecedb76af42b8adff3c3d24ac74ef29bab918ef6454602a0b30a428d
Files
-
04901726ecedb76af42b8adff3c3d24ac74ef29bab918ef6454602a0b30a428d.exe windows:5 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 7.1MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE