Static task
static1
Behavioral task
behavioral1
Sample
739d816ed821834eb7f728aebf09daab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
739d816ed821834eb7f728aebf09daab.exe
Resource
win10v2004-20231222-en
General
-
Target
739d816ed821834eb7f728aebf09daab
-
Size
2.6MB
-
MD5
739d816ed821834eb7f728aebf09daab
-
SHA1
425c8a28221121f14c9323ae2606534f0cad530b
-
SHA256
d4469d9162c36ac1254e1374fd50b865d72f5c9417a3e2738d32db6f1fb48e1d
-
SHA512
0e606455b18ba6da32a685ce74cd0b66bfecb0e49cf1fa70b078c41721bd1fc7ebba4b29b375d769004659f36ba05547fe226e254e03b384ad0a5f75b638f65b
-
SSDEEP
49152:SqN+V8tgJdffv9M1oJdXN0BMOwLloBrug6LfU9wnNTB:b+CglX9XJdXN0B7+sE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 739d816ed821834eb7f728aebf09daab
Files
-
739d816ed821834eb7f728aebf09daab.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ