Static task
static1
Behavioral task
behavioral1
Sample
dc0eba1377b0712b15d2b4ac4a3b41bfa3f668ac13b3f31ae999d3300441bd39.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dc0eba1377b0712b15d2b4ac4a3b41bfa3f668ac13b3f31ae999d3300441bd39.exe
Resource
win10v2004-20240426-en
General
-
Target
dc0eba1377b0712b15d2b4ac4a3b41bfa3f668ac13b3f31ae999d3300441bd39
-
Size
3.5MB
-
MD5
b848cdddd6bf6fc0fdcf12f45d0cbbf6
-
SHA1
f747754d072a0b5c2ea2c8e84302509aac2e2c92
-
SHA256
dc0eba1377b0712b15d2b4ac4a3b41bfa3f668ac13b3f31ae999d3300441bd39
-
SHA512
ac5b57cd12b1cf71f5201676c88d14d6f4f01463d4b9c5519b8962ca9dd2439b4571d27548661df93ee6b74cbad5c30e949c4f82ab8c93dac65ecd5206c35f42
-
SSDEEP
49152:jJNSsar6iqJUvt9DCdX8POUvgiBOwlzLG:jJNSsar6iqJUvtyX8FvVBOiz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc0eba1377b0712b15d2b4ac4a3b41bfa3f668ac13b3f31ae999d3300441bd39
Files
-
dc0eba1377b0712b15d2b4ac4a3b41bfa3f668ac13b3f31ae999d3300441bd39.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ