Static task
static1
Behavioral task
behavioral1
Sample
7764c6bb40500e338ad6350359042771e56ea5360be33f19dfc29d07b3d19c70.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7764c6bb40500e338ad6350359042771e56ea5360be33f19dfc29d07b3d19c70.exe
Resource
win10v2004-20240226-en
General
-
Target
7764c6bb40500e338ad6350359042771e56ea5360be33f19dfc29d07b3d19c70
-
Size
885KB
-
MD5
06c947c7fc5818cf38b0560ac9166069
-
SHA1
8f064ab88b4bc9a05a0350f4012a6757ef687131
-
SHA256
7764c6bb40500e338ad6350359042771e56ea5360be33f19dfc29d07b3d19c70
-
SHA512
7ae6b1f98b277eb46566d70cb336a14e05409a621f9a48d19f92ead84d21a81514fcda3fd2c152fad5db73a8c84fce55040de551387c67b15b61d23ee48d195f
-
SSDEEP
24576:5xlDSQ/YRaFbcOEgviONMJdVagW111111T:5xLAUbcOEubMJd5W111111T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7764c6bb40500e338ad6350359042771e56ea5360be33f19dfc29d07b3d19c70
Files
-
7764c6bb40500e338ad6350359042771e56ea5360be33f19dfc29d07b3d19c70.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.eh_fram Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 721KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
set_Xcom Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
set_Xfic Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dynamic Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rela.dy Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.dynsym Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ