Static task
static1
Behavioral task
behavioral1
Sample
14fe1a9acfecf6f3d2cc5e14cc9291a70d52c8fc0d5e57ab5c883b4914ee68ba.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
14fe1a9acfecf6f3d2cc5e14cc9291a70d52c8fc0d5e57ab5c883b4914ee68ba.exe
Resource
win11-20240412-en
General
-
Target
14fe1a9acfecf6f3d2cc5e14cc9291a70d52c8fc0d5e57ab5c883b4914ee68ba
-
Size
3.8MB
-
MD5
cf911378a02fed00c2a5da62566e3225
-
SHA1
d3a31329d9b84f975cfe0c6a763320329b289c1d
-
SHA256
14fe1a9acfecf6f3d2cc5e14cc9291a70d52c8fc0d5e57ab5c883b4914ee68ba
-
SHA512
a53c13c360c42e4a7e1dab0b2bb29100abe27a72505155b0fc71dcaaf3fe4aee53a4af874ea997eb75eeff2f0392d685e9a7fc2eb0bbcc60d5199a1ecb8b7b91
-
SSDEEP
98304:7aFM1kVHpgRZAVK6bC5+zEECVXEdhw+6l0sDF42tic/hGhEGwGuvl9Y:y7pgRZ2KWzEJxE7wR0sFiQz4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14fe1a9acfecf6f3d2cc5e14cc9291a70d52c8fc0d5e57ab5c883b4914ee68ba
Files
-
14fe1a9acfecf6f3d2cc5e14cc9291a70d52c8fc0d5e57ab5c883b4914ee68ba.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ