Static task
static1
Behavioral task
behavioral1
Sample
20d2b434b58453de33c9e55532f3ba09.exe
Resource
win7-20231215-en
General
-
Target
20d2b434b58453de33c9e55532f3ba09
-
Size
3.5MB
-
MD5
20d2b434b58453de33c9e55532f3ba09
-
SHA1
daf674782f0deee42463a2e36d616518e938db90
-
SHA256
31d8b86b187400fb819080648280e4e38566c91ff12e9593e4bbece4ce374313
-
SHA512
2e1f2c175fef867a426a4c9ec3877b8e9dc65e270757c0e49896c29f0746e7eea07d0e1304555741a0bf000c6d36aafbc5566444158efb66e78608f335ee3a31
-
SSDEEP
98304:sRS6nfSOQZOt+CW+7EELhF3gxpNOf2k2Y/6I:skj8NBFwxpNOuk2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20d2b434b58453de33c9e55532f3ba09
Files
-
20d2b434b58453de33c9e55532f3ba09.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ