Static task
static1
Behavioral task
behavioral1
Sample
167b20a796a7744ae0ab0c57a843ca50ecf53d281a1215187a40be64836f1806.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
167b20a796a7744ae0ab0c57a843ca50ecf53d281a1215187a40be64836f1806.exe
Resource
win10v2004-20240226-en
General
-
Target
167b20a796a7744ae0ab0c57a843ca50ecf53d281a1215187a40be64836f1806.exe
-
Size
925KB
-
MD5
02d2d08da3100f82dcdc7fe3b8c45135
-
SHA1
ed5b25397ad286352a93cd321662e2f10a6e6685
-
SHA256
167b20a796a7744ae0ab0c57a843ca50ecf53d281a1215187a40be64836f1806
-
SHA512
5b9c01342b32af20e7bbf1080ebd17ccf0b44e25e11e5462f552e850530fb5eff564dcfd1cb90d08f75d330adb4e72e579506d9149569b237b894efbda2876e7
-
SSDEEP
12288:a+XPBFG4I5KEhzVL9mHsJi4l1eYxIfaZTU6uJIWeHmhmWb0wIWfaaiSwU021OjLP:vy4YVYMIqkCZZ2dIW+2KJP4qz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 167b20a796a7744ae0ab0c57a843ca50ecf53d281a1215187a40be64836f1806.exe
Files
-
167b20a796a7744ae0ab0c57a843ca50ecf53d281a1215187a40be64836f1806.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ