Static task
static1
Behavioral task
behavioral1
Sample
d0e0592a3f2b74dce5876632864d25e9a9e87494080c7e0ed7c3b48cdfdd461f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d0e0592a3f2b74dce5876632864d25e9a9e87494080c7e0ed7c3b48cdfdd461f.exe
Resource
win10v2004-20240226-en
General
-
Target
d0e0592a3f2b74dce5876632864d25e9a9e87494080c7e0ed7c3b48cdfdd461f
-
Size
1.7MB
-
MD5
acd0036d7e5c36b3805501b4ba626ee1
-
SHA1
ed179f14d956e2b4aed870c31dd261a6f9379da8
-
SHA256
d0e0592a3f2b74dce5876632864d25e9a9e87494080c7e0ed7c3b48cdfdd461f
-
SHA512
38d5b41b6cb3e6ec7ec9febbadb249b39aeab7c68427a94b2f04c6cbf4e541913cb57d428c35687e13929076878d394b9983a7facc6095ea27ed73e7cf3e54b4
-
SSDEEP
49152:s7C1aQZYKDgtXEsB6n20iMOgzf4+NrWkS:ZaQlDgt0I6SkAL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0e0592a3f2b74dce5876632864d25e9a9e87494080c7e0ed7c3b48cdfdd461f -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
d0e0592a3f2b74dce5876632864d25e9a9e87494080c7e0ed7c3b48cdfdd461f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE