Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_06d64eb7ad8b34f6381d4614ef1f8031_hive.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-08_06d64eb7ad8b34f6381d4614ef1f8031_hive.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-05-08_06d64eb7ad8b34f6381d4614ef1f8031_hive
-
Size
4.8MB
-
MD5
06d64eb7ad8b34f6381d4614ef1f8031
-
SHA1
04c4838f6dbbd61b282e152769423f6f875b479a
-
SHA256
c172d7d69d4bae87327c27002f446aca35033dccb4c4ad5878014c44e55ce9a5
-
SHA512
889d92f90983ab739dbbcf17cea6abc2b435c46e1cb9e4ae4bd9955f6dca76197ad96b3d127f9484474210537fa0f3532de3dce21d8f2a8a0e9473c76cecac46
-
SSDEEP
98304:nSX0/MVVSNqQKMC7bZvEnUO1Ol4DZgXCeKYyD:ibV4wpFve
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-08_06d64eb7ad8b34f6381d4614ef1f8031_hive
Files
-
2024-05-08_06d64eb7ad8b34f6381d4614ef1f8031_hive.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 23.8MB - Virtual size: 23.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27.4MB - Virtual size: 27.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 925KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 281B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 3.0MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 702KB - Virtual size: 702KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 512B - Virtual size: 42B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/65 Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/78 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/90 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ