Static task
static1
Behavioral task
behavioral1
Sample
961975054ab22f69c99a309de4b90eba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
961975054ab22f69c99a309de4b90eba.exe
Resource
win10v2004-20231215-en
General
-
Target
961975054ab22f69c99a309de4b90eba
-
Size
860KB
-
MD5
961975054ab22f69c99a309de4b90eba
-
SHA1
341ec85d5b8918a6c4a1ed041644489ba080579f
-
SHA256
f3781b1871027dadc5dc4f375d047e6dc415456f34d12c61662cd3238416598f
-
SHA512
aa26770e739680c28ba2ab0f961d199550fcdbba7c5b8a09c43deeb820529a71c66960989bbef77ef4ffca69f0271d6d848199ff50805036554229ed1c2f1360
-
SSDEEP
6144:ATV4CCUYSvPSa7zDJwX+iTCXTx0OhIfQV4TV4CCUYSvPSa7zDJwX+iTCXTx0OhIs:iiUBPSa7xwXtCFUiUBPSa7xwXtCrv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 961975054ab22f69c99a309de4b90eba
Files
-
961975054ab22f69c99a309de4b90eba.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 675KB - Virtual size: 675KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ