Static task
static1
Behavioral task
behavioral1
Sample
7f0bda5a7aa7ea5ee5733233f0a4a84558aa0334f60cafc568f9805918daf50c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7f0bda5a7aa7ea5ee5733233f0a4a84558aa0334f60cafc568f9805918daf50c.exe
Resource
win10v2004-20240412-en
General
-
Target
7f0bda5a7aa7ea5ee5733233f0a4a84558aa0334f60cafc568f9805918daf50c
-
Size
1.7MB
-
MD5
37a4a64394e2f7398a73478371af87e3
-
SHA1
75b20d39845b08a57b8e0fc8d70d9aa228939cb2
-
SHA256
7f0bda5a7aa7ea5ee5733233f0a4a84558aa0334f60cafc568f9805918daf50c
-
SHA512
6a091f9d7c5685be016f718ec1fed2f52cf842fa82ccb19f3c617d9553441de98efd5de70ab03346298159d0d2154cc82e8be23320923d2029a622b504a3b37f
-
SSDEEP
49152:r7L1aQZYKDgtXEsB6n20iMOGf4+NrWkS:paQlDgt0I6SGAL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f0bda5a7aa7ea5ee5733233f0a4a84558aa0334f60cafc568f9805918daf50c -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
7f0bda5a7aa7ea5ee5733233f0a4a84558aa0334f60cafc568f9805918daf50c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE