Static task
static1
Behavioral task
behavioral1
Sample
e58d8f061a145ad4f4c290063d719c173fac7e6003508e57a9e2398ff1be78de.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e58d8f061a145ad4f4c290063d719c173fac7e6003508e57a9e2398ff1be78de.exe
Resource
win10v2004-20231215-en
General
-
Target
e58d8f061a145ad4f4c290063d719c173fac7e6003508e57a9e2398ff1be78de
-
Size
274KB
-
MD5
d87702ef0fbe1da31638d4442603df52
-
SHA1
55aa148012a690f1c716c7f6c7d9a72c8f4df610
-
SHA256
e58d8f061a145ad4f4c290063d719c173fac7e6003508e57a9e2398ff1be78de
-
SHA512
ed77a4b845a390ab7774f565765833c483e59b521db055a82a0632ba6993cdd6f3d22f64b7e8648f8301c7f77320cae67ad5abb7c881f470fa0358ccfd528f72
-
SSDEEP
3072:yjC31kqH24YsjpugnOy4Lg3TNOg22WjI5Wx0fGscZCFvWtapmvEjbpF8kriqllIQ:iC31kqH24YspSCFQ65heklIYhZLWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e58d8f061a145ad4f4c290063d719c173fac7e6003508e57a9e2398ff1be78de
Files
-
e58d8f061a145ad4f4c290063d719c173fac7e6003508e57a9e2398ff1be78de.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ