Static task
static1
Behavioral task
behavioral1
Sample
10484-11363-1762-10285-21611-30725-18984-15129-6056_1.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
10484-11363-1762-10285-21611-30725-18984-15129-6056_1.exe
Resource
win10v2004-20240226-en
General
-
Target
10484-11363-1762-10285-21611-30725-18984-15129-6056_1.exe
-
Size
1.1MB
-
MD5
0dc755c7feb93857a2cf99c17b663ed0
-
SHA1
64c771d29e608c9fdd53fc51892cfae69d9e13a6
-
SHA256
d4d95348daded8d7dc64b35a9fa270cfda927045adf4643437253090e20fee97
-
SHA512
5f52dd3d8ffe4e81fa7cb190f834a2a84dd33c94f511e4ffb24fd875355e123e4eccf33a7875e0689778172b9ac105cdee466d853c825228fc79d928de5eec2f
-
SSDEEP
24576:R2os0X27nQvJopq2YeRr5W3CZimp4aPgFM0xKOiaoX2lL3vbuzwpbGpjH:r8Lpq2YeRkSZimkFM+Q+ucNGpT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10484-11363-1762-10285-21611-30725-18984-15129-6056_1.exe
Files
-
10484-11363-1762-10285-21611-30725-18984-15129-6056_1.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
uYVcVC_u Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ipLXhwXw Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x\wgBySE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE