Static task
static1
Behavioral task
behavioral1
Sample
01de11aa9f39e142d647efadb6546c0d99a2750442db74e86b40426af9e1af7c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
01de11aa9f39e142d647efadb6546c0d99a2750442db74e86b40426af9e1af7c.exe
Resource
win10v2004-20230915-en
General
-
Target
01de11aa9f39e142d647efadb6546c0d99a2750442db74e86b40426af9e1af7c
-
Size
1.8MB
-
MD5
b84502e1d58fa68ac1de8a8e56aad613
-
SHA1
72c3c7d98d38f0fe4f78e7a9b13fe705131d78af
-
SHA256
01de11aa9f39e142d647efadb6546c0d99a2750442db74e86b40426af9e1af7c
-
SHA512
cef2420d712020c10fddd5c040950228db6a00559a577dee37b51a1f0fc178c54a42f020a5854edd4fc83b1dd1140e405f7b75d8cb4250669e8681e6788047a2
-
SSDEEP
24576:bhE5RWDNLInR3Psnmx7DsntWq0iQj7Boc4ed0r7UaZ4Q/ouCyOQSnDOVppyrxHRf:mWBLsacwx0jvBP02wFVDylzFYmHirQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01de11aa9f39e142d647efadb6546c0d99a2750442db74e86b40426af9e1af7c
Files
-
01de11aa9f39e142d647efadb6546c0d99a2750442db74e86b40426af9e1af7c.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VKcbHzCb Size: - Virtual size: 64.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L7qMA7Kr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I96WWB1b Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jwrwORJY Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MobTfzYy Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 708KB - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ