Static task
static1
Behavioral task
behavioral1
Sample
5a353d0debe42bfc991b46e607a512f029d1e8f715f7df8b53dd9777dcd99657.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5a353d0debe42bfc991b46e607a512f029d1e8f715f7df8b53dd9777dcd99657.exe
Resource
win10v2004-20240508-en
General
-
Target
5a353d0debe42bfc991b46e607a512f029d1e8f715f7df8b53dd9777dcd99657
-
Size
3.4MB
-
MD5
ffaf5d5b4ecf2a06a5e342dd91c2f389
-
SHA1
0be27750bdd50b3bd132c33abc9582c5650d88ca
-
SHA256
5a353d0debe42bfc991b46e607a512f029d1e8f715f7df8b53dd9777dcd99657
-
SHA512
93f1868c846f19b9543f5b2bd97f1173df377ea8e55449a90994989a287b66f244c95e45e0c377e2cb34cb945503bf76d3627c449359f0f701361af5e31bdf47
-
SSDEEP
49152:y0yYSOmGNjiSZTKAzkltDhTCcVX8saTtWyc/AecJ5P2D0qZGajbgrm1rsHQZanix:yPKNuSZTKA0t9FFPEaAeCOd5PgrGWZP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a353d0debe42bfc991b46e607a512f029d1e8f715f7df8b53dd9777dcd99657
Files
-
5a353d0debe42bfc991b46e607a512f029d1e8f715f7df8b53dd9777dcd99657.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ