Static task
static1
Behavioral task
behavioral1
Sample
f2a3ccfa75b18bf0c0096b469ca5b1dc7cad5576d6a9d2171c1a45e0f3dc32bd.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f2a3ccfa75b18bf0c0096b469ca5b1dc7cad5576d6a9d2171c1a45e0f3dc32bd.exe
Resource
win10v2004-20240419-en
General
-
Target
f2a3ccfa75b18bf0c0096b469ca5b1dc7cad5576d6a9d2171c1a45e0f3dc32bd
-
Size
619KB
-
MD5
af723be4cd901f829ede65de37a60c9e
-
SHA1
f6a7974198e5db8613b374450757b93f6b6bd73f
-
SHA256
f2a3ccfa75b18bf0c0096b469ca5b1dc7cad5576d6a9d2171c1a45e0f3dc32bd
-
SHA512
34615c5065b42dadf592b4767ee8f2505d2508838906b434a53a49038ae89fd2f829d6d2dd0c731481d9bde0d7a3f250e813d80520b503193f946ebac294dd59
-
SSDEEP
12288:tfJrty4PqTs2y/U0u+Srj4wsfp5EMWHWxOfQvzCOcB5EKBiUVgaJB:nZy4iubSBsfXEpfQvdK4UVgaJB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2a3ccfa75b18bf0c0096b469ca5b1dc7cad5576d6a9d2171c1a45e0f3dc32bd
Files
-
f2a3ccfa75b18bf0c0096b469ca5b1dc7cad5576d6a9d2171c1a45e0f3dc32bd.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ