Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_e984cfac0a7ab8fe740de9b3d8c99738_hive.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_e984cfac0a7ab8fe740de9b3d8c99738_hive.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-22_e984cfac0a7ab8fe740de9b3d8c99738_hive
-
Size
4.8MB
-
MD5
e984cfac0a7ab8fe740de9b3d8c99738
-
SHA1
acafa801a39f3d468109fcfe958eac0b37229202
-
SHA256
f6e098c1e26f2f813e7772013a9599f09a73146eaefa6875e53253343884b974
-
SHA512
6cce492bf1ba2be12e31a2a2aa3cecb334120244f519ee23fcc1890ca49c650d7eeadd3dc486dc03aeb3d040dcf77238b1846f95123b630182f94f9045c99742
-
SSDEEP
98304:N5qGH5QNwczOXxXFtR8uj+hGNA5GJPHiYz:R68Xd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-22_e984cfac0a7ab8fe740de9b3d8c99738_hive
Files
-
2024-04-22_e984cfac0a7ab8fe740de9b3d8c99738_hive.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 20.6MB - Virtual size: 20.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22.5MB - Virtual size: 22.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 926KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ