Static task
static1
Behavioral task
behavioral1
Sample
de3e28578bead62ae0e27fa911ea311b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de3e28578bead62ae0e27fa911ea311b.exe
Resource
win10v2004-20240226-en
General
-
Target
de3e28578bead62ae0e27fa911ea311b
-
Size
26.8MB
-
MD5
de3e28578bead62ae0e27fa911ea311b
-
SHA1
a888f2401d666c986b461d5467306e9c306e6b73
-
SHA256
6f8c10b15fd3e4808f97098019d6ea750df624e2e13619d37975331334eca652
-
SHA512
38332c48db7bf327375f381bcb5d187f4434afdb9c74d6284d98b68853c2d9d40e2529f739bc3481b71d7383fa970755cc6319762b002fe1b48a6593ac193445
-
SSDEEP
196608:cyliS50WRciIVS7aKEF/lYV3j416TLvT8h+RhWCzK:+WRciIWaKEF/lYJ3LvDzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3e28578bead62ae0e27fa911ea311b
Files
-
de3e28578bead62ae0e27fa911ea311b.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ