Static task
static1
Behavioral task
behavioral1
Sample
101d379bca340db452de52bcf868c31a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
101d379bca340db452de52bcf868c31a.exe
Resource
win10v2004-20231215-en
General
-
Target
101d379bca340db452de52bcf868c31a
-
Size
1.4MB
-
MD5
101d379bca340db452de52bcf868c31a
-
SHA1
5426b3e018ed67d0f960c464050588ae25dfc82f
-
SHA256
12ce0b7b448132740cc24e522b99c52908b81bc4800eaffaf4a71c2eb025ad4c
-
SHA512
e45dd932bf7a4c1518c16a0323b01ff5af9255a08464a45e8f7f843ba77fc6d5fa3ac730adf0e7b2ac82561a1a6c298ca15cae00ec6c89f68b6cf561a3b56849
-
SSDEEP
24576:u+fl7W4CtMfYYobkwgVV0W8vsN2a9vBnhUzw8Tm426kvEPJSknr5a79Pag9jQbWM:dxjfsmsW80992Em2/0Ic564OkbWMZJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101d379bca340db452de52bcf868c31a
Files
-
101d379bca340db452de52bcf868c31a.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 239KB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE