Static task
static1
Behavioral task
behavioral1
Sample
1159c82123557ff27f87a18b8eef6dec1812b2980c8bd06addd2d658ff95d878.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1159c82123557ff27f87a18b8eef6dec1812b2980c8bd06addd2d658ff95d878.exe
Resource
win10v2004-20231215-en
General
-
Target
1159c82123557ff27f87a18b8eef6dec1812b2980c8bd06addd2d658ff95d878
-
Size
1.7MB
-
MD5
dc6d81ceb7ebabeaa1926ab1e613cf6f
-
SHA1
f8eed598b19d3b36a35bf9df1612261ec8464439
-
SHA256
1159c82123557ff27f87a18b8eef6dec1812b2980c8bd06addd2d658ff95d878
-
SHA512
a81ca042a17a4be12c82a9bfbeabfe0c4601ab4a597a2a65e7940e7cf722fa06e3c7f60f40450296a5b9eb1e4f5ec57ba7bd7db7b4334970db1658f5c1282022
-
SSDEEP
24576:SV27xQzlkFXN9iZp3hrfTjzCRzWNLdpXFX2IvL2IvXvqwAPkOCpXF:SI7mhrfla
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1159c82123557ff27f87a18b8eef6dec1812b2980c8bd06addd2d658ff95d878
Files
-
1159c82123557ff27f87a18b8eef6dec1812b2980c8bd06addd2d658ff95d878.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ