Behavioral task
behavioral1
Sample
01f9220bb6c8ac8405ef339e5b62111b.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
01f9220bb6c8ac8405ef339e5b62111b.exe
Resource
win10v2004-20231023-en
General
-
Target
01f9220bb6c8ac8405ef339e5b62111b.bin
-
Size
10.2MB
-
MD5
01f9220bb6c8ac8405ef339e5b62111b
-
SHA1
1ce4ef35d482b801983f63c605fcd8372aa8b6b8
-
SHA256
5100f744ed568a9149b8d2ab8fcee6673d601941b24d913fd42f329e1580a914
-
SHA512
7b1181e68760d31fd8da765e0fd48921ddc4c705ad456778129aecce064656701e17b9502d4d4cd4d61ad64e4e0f9c2845591605a8b7f5f3db0db1949f8a2d59
-
SSDEEP
196608:vSug8H2JlQt8OzrMO1tdHTGOEybFDqszu97:rLElQttX1tl1E6uszu97
Malware Config
Signatures
-
Privateloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01f9220bb6c8ac8405ef339e5b62111b.bin
Files
-
01f9220bb6c8ac8405ef339e5b62111b.bin.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp®0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp®1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp®2 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 380KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ