Static task
static1
Behavioral task
behavioral1
Sample
f1f617bc01940a78c3148280a18099945547044fe0c81e4d51999b642c64731a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1f617bc01940a78c3148280a18099945547044fe0c81e4d51999b642c64731a.exe
Resource
win10v2004-20240412-en
General
-
Target
f1f617bc01940a78c3148280a18099945547044fe0c81e4d51999b642c64731a
-
Size
12.2MB
-
MD5
da2a4f3e72869f252945f082457fd204
-
SHA1
30309e54ff9e1b32093bf995289595d53368783d
-
SHA256
f1f617bc01940a78c3148280a18099945547044fe0c81e4d51999b642c64731a
-
SHA512
5263e447f1bf2fb6e7a39217acbbcd336add9862adfcbd3d5f01b32271c06e09d71c3cd94b0825d06a4f8dd0b6067a33129f38c8c507e99841ee6eb35a503378
-
SSDEEP
196608:J2EivLbN8+aY0BEUQ+HiOI71q+Nrv5afHh2eShWctW/3T:J2RLb7a9Nil78+Nr6Hh2zE/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1f617bc01940a78c3148280a18099945547044fe0c81e4d51999b642c64731a
Files
-
f1f617bc01940a78c3148280a18099945547044fe0c81e4d51999b642c64731a.exe windows:6 windows x64 arch:x64
fd867d283c8335cc9c03060aaa4c760d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 629KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 455KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdebug_ Size: - Virtual size: 281B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdebug_ Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdebug_ Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug_g Size: - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdebug_ Size: - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdebug_ Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdebug_ Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.&O{ Size: - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.symtab Size: - Virtual size: 94KB
IMAGE_SCN_MEM_READ
.V^= Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Vu6 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.}Ui Size: 12.2MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ