Static task
static1
Behavioral task
behavioral1
Sample
da5a64fc6b46ee58d41cde8112444cb647987cb1804e8073cf4a319ab05ae8f0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
da5a64fc6b46ee58d41cde8112444cb647987cb1804e8073cf4a319ab05ae8f0.exe
Resource
win10v2004-20240419-en
General
-
Target
da5a64fc6b46ee58d41cde8112444cb647987cb1804e8073cf4a319ab05ae8f0
-
Size
10.3MB
-
MD5
76ad8813ef09820f99c07b196b29eabc
-
SHA1
eecec0612dcb196e4f154b0300655e5f46c4d4ac
-
SHA256
da5a64fc6b46ee58d41cde8112444cb647987cb1804e8073cf4a319ab05ae8f0
-
SHA512
4428391c7bfa5acc109dfac0d163c05b651e88e2bb6ddcf9a1b2af612d76126a301242837cac26e638caaf4c500305b412c36bb671627aecaceebda67dcbc54e
-
SSDEEP
196608:VbYzKCHmnvhSQQ8y0OzL7jCCQ9662/KQNSk7XZxPfzNix0EQcF3KYODoyWUSd:JOKmmnYQXrM7E4Nz7XZxXxipFavoy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da5a64fc6b46ee58d41cde8112444cb647987cb1804e8073cf4a319ab05ae8f0
Files
-
da5a64fc6b46ee58d41cde8112444cb647987cb1804e8073cf4a319ab05ae8f0.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ