Static task
static1
Behavioral task
behavioral1
Sample
87fcc6d8dc6b8fbb8706377063b9d4a15f70105a8791c3c618798d0e4bc8534e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87fcc6d8dc6b8fbb8706377063b9d4a15f70105a8791c3c618798d0e4bc8534e.exe
Resource
win10v2004-20240226-en
General
-
Target
87fcc6d8dc6b8fbb8706377063b9d4a15f70105a8791c3c618798d0e4bc8534e
-
Size
4.1MB
-
MD5
527472ff5cd99fdcfa48a18281526e34
-
SHA1
bf08ab93ae3353c80edce8f946f0c335ca1622f1
-
SHA256
87fcc6d8dc6b8fbb8706377063b9d4a15f70105a8791c3c618798d0e4bc8534e
-
SHA512
1f19571636bbd2b6d2867f65917d30417f37b7327447e1802d5e8b1eaab2a41f40357f09296f72edcc55b649cfbd45bd69f74a8ce0de7105d0fe66011641fbde
-
SSDEEP
98304:Lv8vbR5ZmHiWAtx4MzF8fHXoZroS3UBcx+X4qNV2mI2Y5OyaPjN3V2FJ4Cg+TilE:LkzR56IxNzSvXIYyE51ps7w53AFJy+Tq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87fcc6d8dc6b8fbb8706377063b9d4a15f70105a8791c3c618798d0e4bc8534e
Files
-
87fcc6d8dc6b8fbb8706377063b9d4a15f70105a8791c3c618798d0e4bc8534e.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
|ORQ Size: - Virtual size: 840KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o0`% Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fzw& Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE