Static task
static1
Behavioral task
behavioral1
Sample
23cd69950b5ba9c42eaa5fb9e380c0bc6ebf4533404ede15a6ed0f6abfe48627.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23cd69950b5ba9c42eaa5fb9e380c0bc6ebf4533404ede15a6ed0f6abfe48627.exe
Resource
win10v2004-20240508-en
General
-
Target
23cd69950b5ba9c42eaa5fb9e380c0bc6ebf4533404ede15a6ed0f6abfe48627.exe
-
Size
3.1MB
-
MD5
5a4907e21a350b8f5ec41bc97c68dc4b
-
SHA1
901f3101d1ba75e8e49730959f41ba298cca12ee
-
SHA256
23cd69950b5ba9c42eaa5fb9e380c0bc6ebf4533404ede15a6ed0f6abfe48627
-
SHA512
8b7167d4f5ded57dd5d7b59c1e0716e91ab01a31e17386cfe8bcef9b95fb937de9079c930cfd98a291afee81ce4ad39451463832d09f64b57fdf51a7cdda5eaf
-
SSDEEP
49152:HzBfc7DQp8TtBl1U6rHcSclWL9O12nGaSF5wNTiFXWgiq9ipyg7sduyGaacWVkXG:Hzu4GobSFqYlX63rzQ2S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23cd69950b5ba9c42eaa5fb9e380c0bc6ebf4533404ede15a6ed0f6abfe48627.exe
Files
-
23cd69950b5ba9c42eaa5fb9e380c0bc6ebf4533404ede15a6ed0f6abfe48627.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ