Static task
static1
Behavioral task
behavioral1
Sample
3aba86a6c08e115d2eefb941af7cdb20_exe64.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3aba86a6c08e115d2eefb941af7cdb20_exe64.exe
Resource
win10v2004-20230915-en
General
-
Target
3aba86a6c08e115d2eefb941af7cdb20_exe64.exe
-
Size
376KB
-
MD5
3aba86a6c08e115d2eefb941af7cdb20
-
SHA1
26e7514d100997720b736aecb760271c7af9ca8f
-
SHA256
fc641647079adb6d764c94830d3500d34a5cae563bace32c8da0da735045a997
-
SHA512
52d90bd96edc76f27cf818b5147d0b75fa9c821ef5742c25a69532131563d9ed4b419bbcf3bf364fc20ca19fb40ffd219abfd4e99a9e017fcb9c68ee1e700885
-
SSDEEP
6144:949idl8rpXwFesX6zWf0G+TP/XXVeXC8X3cO9bOXX39I:a4OGOJI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aba86a6c08e115d2eefb941af7cdb20_exe64.exe
Files
-
3aba86a6c08e115d2eefb941af7cdb20_exe64.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 309KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ