Static task
static1
Behavioral task
behavioral1
Sample
f07c599131ef529166abd350ce42ddeb43b730f8a31563c2b5b73c513505cf13.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
f07c599131ef529166abd350ce42ddeb43b730f8a31563c2b5b73c513505cf13.exe
Resource
win11-20240221-en
General
-
Target
f07c599131ef529166abd350ce42ddeb43b730f8a31563c2b5b73c513505cf13.exe
-
Size
4.4MB
-
MD5
05f8ca54e5f2a0061475a8becfd08c09
-
SHA1
98a62046459aa5470f35e943b09222956078791b
-
SHA256
f07c599131ef529166abd350ce42ddeb43b730f8a31563c2b5b73c513505cf13
-
SHA512
f427f89dbca374c93eff80f97ea3bbbd0af5bfbf32802561c28b8fa3c481b208a8bbb11c78d3aa09a9423e24d8a3ab82fa77ce206707c1a0840220b16fe1a5fe
-
SSDEEP
98304:p0HVIvxb+n0C0Vo0Wq7C4sWeBuS6xQmu+y8dzNdCYsgI:4+vZ20C0kJlAZu+ySnsgI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f07c599131ef529166abd350ce42ddeb43b730f8a31563c2b5b73c513505cf13.exe
Files
-
f07c599131ef529166abd350ce42ddeb43b730f8a31563c2b5b73c513505cf13.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 341KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 147KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ