Static task
static1
Behavioral task
behavioral1
Sample
df95f67b20a1a3da66ccd6754900a174c71e740f2b8e4fda2957cd3aae733597.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df95f67b20a1a3da66ccd6754900a174c71e740f2b8e4fda2957cd3aae733597.exe
Resource
win10v2004-20240226-en
General
-
Target
df95f67b20a1a3da66ccd6754900a174c71e740f2b8e4fda2957cd3aae733597
-
Size
2.2MB
-
MD5
2314190ea09d336b9de5dde82e38d813
-
SHA1
baad3c034c84ad807d55c379dfb314238bb7debd
-
SHA256
df95f67b20a1a3da66ccd6754900a174c71e740f2b8e4fda2957cd3aae733597
-
SHA512
f7243a52b137fae1329e092efb39f14f7ca972a851c043d9b2f828dbfefa4e38f3bae4716f28b90fe2de835cc04ad7c87931da58af963d63c0658d4b8ffc0d64
-
SSDEEP
49152:WN7OIBmuXVAj6yELdqjUvQWfgiet5k+LYwC9BEQD:rUV46yWoAxet2f9B9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df95f67b20a1a3da66ccd6754900a174c71e740f2b8e4fda2957cd3aae733597
Files
-
df95f67b20a1a3da66ccd6754900a174c71e740f2b8e4fda2957cd3aae733597.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ