Static task
static1
Behavioral task
behavioral1
Sample
e7b9fc06fc5c1c1210b4be2912566ca792d4ca7a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
e7b9fc06fc5c1c1210b4be2912566ca792d4ca7a.exe
Resource
win10v2004-20231023-en
General
-
Target
e7b9fc06fc5c1c1210b4be2912566ca792d4ca7a
-
Size
308.9MB
-
MD5
cecdb55d7305c7e6ce376fb1bb5212a5
-
SHA1
b2a92f9da028b798433540627b193d6309f9661f
-
SHA256
01260f1b29c2be7f0093f2dc2811683ac408dbc9f9f9f5eadf9ffa135e6de335
-
SHA512
8c76b253180cab0ea3fbd6e5c6da7bce062d54343bac55ee7864d44cb88f6fd4e4c534b3a51eae2b520789ee2826a3fc3739d575230025fd44fb24f087a471b8
-
SSDEEP
24576:w98ukAmEgjSuvbcjOE4fO4qZDBz+SZ7Mdc:wkhEstaD1+SZwdc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7b9fc06fc5c1c1210b4be2912566ca792d4ca7a
Files
-
e7b9fc06fc5c1c1210b4be2912566ca792d4ca7a.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 307.0MB - Virtual size: 307.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ