Static task
static1
Behavioral task
behavioral1
Sample
d87d212b214a2a373f4cdc0953c35eb85ba7616110b73f7ee6af31d14107cf41.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d87d212b214a2a373f4cdc0953c35eb85ba7616110b73f7ee6af31d14107cf41.exe
Resource
win10v2004-20240412-en
General
-
Target
d87d212b214a2a373f4cdc0953c35eb85ba7616110b73f7ee6af31d14107cf41
-
Size
53KB
-
MD5
9dd4fdfa1ca524b76e2fbc346cefa318
-
SHA1
c0a25c079cbdeafd86ea081efc5cbd3f1f8d0f93
-
SHA256
d87d212b214a2a373f4cdc0953c35eb85ba7616110b73f7ee6af31d14107cf41
-
SHA512
999ed360cec22f96692726f85b9674c6533b54e3990e8e5f5b00889f028788e62045f1f9070c0d47ea6ad61dca17e64600799f8d7e628c35ae69304d07e41b7f
-
SSDEEP
768:1PFTYcBJWMzebPkVT/RQMMClFSrs5lD/3aj8xX:1O8WMCwRQM/Tz31
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d87d212b214a2a373f4cdc0953c35eb85ba7616110b73f7ee6af31d14107cf41
Files
-
d87d212b214a2a373f4cdc0953c35eb85ba7616110b73f7ee6af31d14107cf41.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 14.3MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9.9MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 956KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ