Static task
static1
Behavioral task
behavioral1
Sample
stage1.dll
Resource
win10v2004-20240226-en
General
-
Target
stage1.exe
-
Size
1.4MB
-
MD5
c904cdc0ebbd619d32863342e0a223ed
-
SHA1
329f095a75fe2b8818f33c78203a8d115933af45
-
SHA256
59c381a0aabc27ae934d5da676361980dc929c68564e52112fb666dee961c9eb
-
SHA512
66aabcebf0e04955b80d7f11d338cf483c7168a02fb55be61fcbf3a805be9310746ba1beb6197b463b111b1c5bdb84614a6e8ad60d33e5efba225252b0bca37f
-
SSDEEP
12288:m7NQbK5tetG89OOO+HKv59g2eshs0iuph5dS9fDwkNB/q+eZjLLRWUTX2RDB2B/y:vwzg2esuuph5dSBv1YdRB/wUjVl1k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource stage1.exe
Files
-
stage1.exe.dll windows:10 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rdata Size: 4KB - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ