Static task
static1
Behavioral task
behavioral1
Sample
862e5581a0d7ee6ab3acb3440a5ea468d96b6412a58a8848d5131ea79080a422.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
862e5581a0d7ee6ab3acb3440a5ea468d96b6412a58a8848d5131ea79080a422.exe
Resource
win10v2004-20240412-en
General
-
Target
862e5581a0d7ee6ab3acb3440a5ea468d96b6412a58a8848d5131ea79080a422
-
Size
999KB
-
MD5
4d558e98bb3a86e00819048c6cbeeb43
-
SHA1
89f6481726557269b89c4c812e947767d1bc43d5
-
SHA256
862e5581a0d7ee6ab3acb3440a5ea468d96b6412a58a8848d5131ea79080a422
-
SHA512
b07929b9af65b946ef7152b8de8bbe703ea8eeaa21feea783e76de3d435ed093cd7d03e3d5ecd08ff079f4f050119e59ad5631eedb87b4e117a1f97d1b3e212d
-
SSDEEP
24576:gsP3lLzLxYWzf04bn9Vy3fT8P2QtThF8mrNvo/5zjWgXI:gUbhb9GfwP2QtpeNjXY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 862e5581a0d7ee6ab3acb3440a5ea468d96b6412a58a8848d5131ea79080a422
Files
-
862e5581a0d7ee6ab3acb3440a5ea468d96b6412a58a8848d5131ea79080a422.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 414KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ