Static task
static1
Behavioral task
behavioral1
Sample
d96dc9bfc242ce62bc6a21b966af4ff404809fb97598d851fc99ba5b5c9d7143.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
d96dc9bfc242ce62bc6a21b966af4ff404809fb97598d851fc99ba5b5c9d7143.exe
Resource
win10v2004-20231023-en
General
-
Target
d96dc9bfc242ce62bc6a21b966af4ff404809fb97598d851fc99ba5b5c9d7143
-
Size
155.8MB
-
MD5
6ccb87e569109fc4d12d54faa8a61d66
-
SHA1
1c98c4aa91d86e321667f262dabc84793671efec
-
SHA256
d96dc9bfc242ce62bc6a21b966af4ff404809fb97598d851fc99ba5b5c9d7143
-
SHA512
8fd81973e3fc6e6a67c00b02e0eb01a89b0991e6a2245e4bf784fe04144046636a6fcfb11449fb805ea2d2fd25e9e68fa697a25e6de723e4a42f9e45c085885f
-
SSDEEP
786432:clcC8ROwuElwzFm9rH16Ly/iuysBIJeL/7G5HTrw7TTtLwSTRpf4P1wT1/Wc0W1Q:KWRKSeFm9rH1S3sDkHXwfvmn
Malware Config
Signatures
-
CustAttr .NET packer 1 IoCs
Detects CustAttr .NET packer in memory.
resource yara_rule sample CustAttr -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d96dc9bfc242ce62bc6a21b966af4ff404809fb97598d851fc99ba5b5c9d7143
Files
-
d96dc9bfc242ce62bc6a21b966af4ff404809fb97598d851fc99ba5b5c9d7143.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ