Static task
static1
Behavioral task
behavioral1
Sample
441fd4defa8058995346a04cd57508924bd22f5b16e7274dbc0b8e75a3ae6a55.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
441fd4defa8058995346a04cd57508924bd22f5b16e7274dbc0b8e75a3ae6a55.exe
Resource
win10v2004-20231023-en
General
-
Target
441fd4defa8058995346a04cd57508924bd22f5b16e7274dbc0b8e75a3ae6a55
-
Size
687KB
-
MD5
8697787a442ec9e0ae8f10b564efe77f
-
SHA1
fda7203a38fcfa61c424d75e22c423e2ba762b6a
-
SHA256
441fd4defa8058995346a04cd57508924bd22f5b16e7274dbc0b8e75a3ae6a55
-
SHA512
82b9015c02fb9508fe5869bc332cca0cf053517b4c7ddc0ac6f2a002279aba6edb5d97bea024e8bccbed029184833acd7134f730eef4ee66882cb3dd24be4ff7
-
SSDEEP
12288:QsBzFlWJAE4hozJixoWQhPor9qyCcWIWsA595KycF0Cp7e/u8BiORa:A4uz8oWQhPu9v8g13ORa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 441fd4defa8058995346a04cd57508924bd22f5b16e7274dbc0b8e75a3ae6a55
Files
-
441fd4defa8058995346a04cd57508924bd22f5b16e7274dbc0b8e75a3ae6a55.exe windows:6 windows x64
498bfc388046149a5b33f4d14da221ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
GetLastError
TerminateProcess
FormatMessageA
LoadLibraryA
GetThreadLocale
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 604KB - Virtual size: 609KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ