Static task
static1
Behavioral task
behavioral1
Sample
9f964c6fd47e7582f72b3e3f9941cd1ca3354b5f568ff0c4f6d070655d6bd299.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f964c6fd47e7582f72b3e3f9941cd1ca3354b5f568ff0c4f6d070655d6bd299.exe
Resource
win10v2004-20240226-en
General
-
Target
9f964c6fd47e7582f72b3e3f9941cd1ca3354b5f568ff0c4f6d070655d6bd299.exe
-
Size
3.1MB
-
MD5
2ed9483d30a2109ec02ee1c903f70494
-
SHA1
c581726dc91f460519d81f2bc8b9f876463c98b7
-
SHA256
9f964c6fd47e7582f72b3e3f9941cd1ca3354b5f568ff0c4f6d070655d6bd299
-
SHA512
5d8efb5a8cf10f2d5b48db77561198c61e490a241e80413c4aca84ebde8de3c62b897263461212f6019179ccd565926d08f36b5dca45088a65028fe44ea49dc9
-
SSDEEP
49152:FzBfc7D8BZAVag4shuGHEy0gAxxYIz5M6Pn3Q4TGaePtXvhAK2t3hf2qKxl/tG0X:FzuScr45ZZePtA+d72hpSgha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f964c6fd47e7582f72b3e3f9941cd1ca3354b5f568ff0c4f6d070655d6bd299.exe
Files
-
9f964c6fd47e7582f72b3e3f9941cd1ca3354b5f568ff0c4f6d070655d6bd299.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ