Static task
static1
Behavioral task
behavioral1
Sample
a91faefd1f8df889ca61c00266044044857c3da4984ccb34240bb75849bbd549.exe
Resource
win7-20240221-en
General
-
Target
a91faefd1f8df889ca61c00266044044857c3da4984ccb34240bb75849bbd549.exe
-
Size
4.0MB
-
MD5
7010962cccd78789767380410a70b7c8
-
SHA1
f16ab407fc8f1ae8a954bc4ffb018447323d670b
-
SHA256
a91faefd1f8df889ca61c00266044044857c3da4984ccb34240bb75849bbd549
-
SHA512
67cce5cc3f5468df97ef28397ff01344b744a49e8e006d043622ea4b7730dd28be157855a5c2c671b34609fef62b4ef028feab1860030cfcc3431c6f68019aad
-
SSDEEP
24576:4FWOIZDTZtm0NtTM4vEsfB/vv1xshIsqwbHgbtN:4FWr9trEsR3HshRqUH6t
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_SmartAssembly -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a91faefd1f8df889ca61c00266044044857c3da4984ccb34240bb75849bbd549.exe
Files
-
a91faefd1f8df889ca61c00266044044857c3da4984ccb34240bb75849bbd549.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 656KB - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ