Static task
static1
Behavioral task
behavioral1
Sample
d72e0526bd82fd3a605c74c60dacc9caeb82d22121fe0d38a85ffb06a7f4596a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d72e0526bd82fd3a605c74c60dacc9caeb82d22121fe0d38a85ffb06a7f4596a.exe
Resource
win10-20231220-en
General
-
Target
d72e0526bd82fd3a605c74c60dacc9caeb82d22121fe0d38a85ffb06a7f4596a
-
Size
3.5MB
-
MD5
ac9c01821fdafd1cec02f7f9aec42a7a
-
SHA1
975bf0bb5c2ac19700eb624ddb8dbcf15d59c285
-
SHA256
d72e0526bd82fd3a605c74c60dacc9caeb82d22121fe0d38a85ffb06a7f4596a
-
SHA512
30a77bdb3880157eab9c0eaf840010b65a84a9198e443e7fce40fb14c826981c78dca995f92eb398f0d15766ee23fe4c1c984cf92ff7c6075050ff6b607e2105
-
SSDEEP
49152:IPlGyD+7B1jin0a5xP3iQwvjZtfk/oAhxexCfK/nR5CcPR7PDjDpfbHgnvBdcP2o:gMvBxz1rpWgV29HZHt3MbivO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d72e0526bd82fd3a605c74c60dacc9caeb82d22121fe0d38a85ffb06a7f4596a
Files
-
d72e0526bd82fd3a605c74c60dacc9caeb82d22121fe0d38a85ffb06a7f4596a.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ