Static task
static1
Behavioral task
behavioral1
Sample
74a1e4f8c48502f4cf6bdf1ff5c842a8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74a1e4f8c48502f4cf6bdf1ff5c842a8.exe
Resource
win10v2004-20231215-en
General
-
Target
74a1e4f8c48502f4cf6bdf1ff5c842a8
-
Size
691KB
-
MD5
74a1e4f8c48502f4cf6bdf1ff5c842a8
-
SHA1
ac709a266cb8afaf136986e5e5f93a37ba22c410
-
SHA256
c4dc5ce27a5d56ed4c621fc17dc8febb54acd0db97788d6c539b9ae026d0d8a4
-
SHA512
b26bf7cd4c00548d2e0e8d6fd601f3bfac9491a69a37046932bf144a2ccc29117413b3f4169498b357e94d596ce1dfbeae4a42d91da713dfc4df77e45bb936f7
-
SSDEEP
12288:44I1R/pP6USobBbcY4JiOBRXjIjO8Zsq4nss:44EREUSobBbeJ7RCZN4ss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74a1e4f8c48502f4cf6bdf1ff5c842a8
Files
-
74a1e4f8c48502f4cf6bdf1ff5c842a8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 311KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ