Static task
static1
Behavioral task
behavioral1
Sample
c95f44eeb4d3ecd65264bae3017f5b787b9e8f36fdf2a4362a3a167b5416478d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c95f44eeb4d3ecd65264bae3017f5b787b9e8f36fdf2a4362a3a167b5416478d.exe
Resource
win10v2004-20231130-en
General
-
Target
c95f44eeb4d3ecd65264bae3017f5b787b9e8f36fdf2a4362a3a167b5416478d
-
Size
1.1MB
-
MD5
1daf4a49fdd64462a9abfb2a9b7e8987
-
SHA1
ddd60e101caeb9c4b5420f82ce33f5c1502e4088
-
SHA256
c95f44eeb4d3ecd65264bae3017f5b787b9e8f36fdf2a4362a3a167b5416478d
-
SHA512
86f92fe67c9d056c2f543ec7a71c603f3fc22b877f02c3b943605d79fd7ce903cfe8ea47f18a5b9a06f6ccd531c46530d24eb32c4d253324033d31151bcd8f42
-
SSDEEP
12288:VQ7AW6XHuZQoRyGJa+ZPmK8IwiXh+YOt8QgAQze96MMSqaZvv0jpnJjMJS:VQjZnZu9IeYSaeknaF0tnJQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c95f44eeb4d3ecd65264bae3017f5b787b9e8f36fdf2a4362a3a167b5416478d
Files
-
c95f44eeb4d3ecd65264bae3017f5b787b9e8f36fdf2a4362a3a167b5416478d.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 476KB - Virtual size: 475KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: 512B - Virtual size: 140B
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ