Static task
static1
Behavioral task
behavioral1
Sample
5e7e44857de53b494917bf9b382ad9ccd81b8efcf92f1478ae792c5da1bc1cd5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5e7e44857de53b494917bf9b382ad9ccd81b8efcf92f1478ae792c5da1bc1cd5.exe
Resource
win10v2004-20240412-en
General
-
Target
5e7e44857de53b494917bf9b382ad9ccd81b8efcf92f1478ae792c5da1bc1cd5
-
Size
5KB
-
MD5
b9ccd7e72a9a90d62dc387ae1781e2f7
-
SHA1
2572d702393f4c3dca2ed602222de59e140157a6
-
SHA256
5e7e44857de53b494917bf9b382ad9ccd81b8efcf92f1478ae792c5da1bc1cd5
-
SHA512
6ff5d76f663764d3b37ea09a1b956ee7d0e9ed4f3fdf7d74e8a7adbd29ff014ee9d476bb7e19de1cfeb6bb7c9ef21406a449661b4b9b001b94a4638038499384
-
SSDEEP
24:ew+HGSgYyzDl70vMrIAFv7PZwRgqZEcQU7JK9V17OP/LDy2rFuwCwAvfaZY1u:YvNWDloUrdv7PFQ4fY/3y2ZLyay1u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e7e44857de53b494917bf9b382ad9ccd81b8efcf92f1478ae792c5da1bc1cd5
Files
-
5e7e44857de53b494917bf9b382ad9ccd81b8efcf92f1478ae792c5da1bc1cd5.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 14.3MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9.9MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 956KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ