Static task
static1
Behavioral task
behavioral1
Sample
881cc75b8368cac0360df0dd09e2ae6a0182c835692accc3058eec9c5b7a322d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
881cc75b8368cac0360df0dd09e2ae6a0182c835692accc3058eec9c5b7a322d.exe
Resource
win10v2004-20231215-en
General
-
Target
881cc75b8368cac0360df0dd09e2ae6a0182c835692accc3058eec9c5b7a322d
-
Size
4KB
-
MD5
d0ff1dd33472a33041a17e9d66641a70
-
SHA1
4263342751cff1a948d9335bd71ca3788e855618
-
SHA256
881cc75b8368cac0360df0dd09e2ae6a0182c835692accc3058eec9c5b7a322d
-
SHA512
ed567066a938edce7b05f92c4f71db61aea5007f4ccfa19f0eb7676f3fe9da3b7ccbbc5dbd0e406c43dcedc0da4727da31a41976917d93a5c31e59f793f2b433
-
SSDEEP
48:6IIF9BlQaexX9gZS7An0cF5uduvxRxUjbON9XM/ge93ahr0/:y9BOaMXI70cF50uDxUOvXeg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 881cc75b8368cac0360df0dd09e2ae6a0182c835692accc3058eec9c5b7a322d
Files
-
881cc75b8368cac0360df0dd09e2ae6a0182c835692accc3058eec9c5b7a322d.exe windows:6 windows x64 arch:x64
e82dd51b077167be63c004bed23d0c1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
Sleep
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ