Static task
static1
Behavioral task
behavioral1
Sample
02801d1a1954bc50cd56b36cd1e870f8072be8ef406f5f456a8ffb4b14b145b1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02801d1a1954bc50cd56b36cd1e870f8072be8ef406f5f456a8ffb4b14b145b1.exe
Resource
win10v2004-20240226-en
General
-
Target
02801d1a1954bc50cd56b36cd1e870f8072be8ef406f5f456a8ffb4b14b145b1
-
Size
1.1MB
-
MD5
da07d7519ed1bfe68b50a1f08a331f57
-
SHA1
c0d73047250586592b5795c7f9a48f3dcfde568a
-
SHA256
02801d1a1954bc50cd56b36cd1e870f8072be8ef406f5f456a8ffb4b14b145b1
-
SHA512
8baed442fa9a480c9ce636d557e176308a7be927dac4be8fbca2b9f221f74804691ff56bfc8e2a6c30e1ce8180a172bc17e9a7b1735c42edef24d811a730cb1e
-
SSDEEP
12288:9sTlJgiDMEg4kU7aUXj+6XEhOkM4zkps3jYMD+xmBJns+V0YF/eeq15WNI6leU67:98lJgoEi1NAO14opmjCxmBJ2Y4cmg2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02801d1a1954bc50cd56b36cd1e870f8072be8ef406f5f456a8ffb4b14b145b1
Files
-
02801d1a1954bc50cd56b36cd1e870f8072be8ef406f5f456a8ffb4b14b145b1.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.datayyy Size: 911KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE