Static task
static1
Behavioral task
behavioral1
Sample
01781dde8e2b2ad5eea14fb491b32ec0a6a347fac2c2f47f7b5d550a9c52df77.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
01781dde8e2b2ad5eea14fb491b32ec0a6a347fac2c2f47f7b5d550a9c52df77.exe
Resource
win11-20240221-en
General
-
Target
01781dde8e2b2ad5eea14fb491b32ec0a6a347fac2c2f47f7b5d550a9c52df77
-
Size
2.0MB
-
MD5
2bf527f3af542725d6d7aa0891136a22
-
SHA1
7db81c09e86e755642472c347e94cb95b4a62643
-
SHA256
01781dde8e2b2ad5eea14fb491b32ec0a6a347fac2c2f47f7b5d550a9c52df77
-
SHA512
f6125c68f2a85ca4f832437a5751f367bd3859d8924350623589afaa14d041f52d57247d74957d9a53fa82f502bcf5163b7356d3611889c4675b6b10680dcab6
-
SSDEEP
49152:32g1KvY8oHbk2HcrT/gwEbtsQeYiOIzU1OjkbXXuct9fIdcMDgz5I:mg1KvYFw/gwE5+DOIAsjkbOctBIdcMDH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01781dde8e2b2ad5eea14fb491b32ec0a6a347fac2c2f47f7b5d550a9c52df77
Files
-
01781dde8e2b2ad5eea14fb491b32ec0a6a347fac2c2f47f7b5d550a9c52df77.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ