Static task
static1
Behavioral task
behavioral1
Sample
9e858c048ff2df083289575ea17a053afd25e35419e8c51e3c3d8d087ca1790a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
9e858c048ff2df083289575ea17a053afd25e35419e8c51e3c3d8d087ca1790a.exe
Resource
win10-20231020-en
General
-
Target
9e858c048ff2df083289575ea17a053afd25e35419e8c51e3c3d8d087ca1790a
-
Size
2.6MB
-
MD5
4396b9aeb4527138e6532d66b682df44
-
SHA1
2d5db92f298b57aece979e350378ba1f07275d4a
-
SHA256
9e858c048ff2df083289575ea17a053afd25e35419e8c51e3c3d8d087ca1790a
-
SHA512
80989209da413e8b2bd505dfbeaa4a706f4c28b828ba864c56e67ea2c556ed73f714acbf6a7eb244f5beaae1ba7140dfeeac1a6cb50131ad98c1abf5fd36454e
-
SSDEEP
49152:wnkrpl+htEg5yOSuk2A4EZchFBhJXy7i0NLx:w3nE/t2xEo3XM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e858c048ff2df083289575ea17a053afd25e35419e8c51e3c3d8d087ca1790a
Files
-
9e858c048ff2df083289575ea17a053afd25e35419e8c51e3c3d8d087ca1790a.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ