Static task
static1
Behavioral task
behavioral1
Sample
c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d.exe
Resource
win10v2004-20240426-en
General
-
Target
c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d
-
Size
3.6MB
-
MD5
1b2eb636916557667dccccf81a9987ba
-
SHA1
953834a7e13647588996b3f21aa9eb518b5fe732
-
SHA256
c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d
-
SHA512
3afe52234ca0d4ca8d53f627dcd265355274d554e930007b67139a984de9895d71cd5594aff4868ef46e8ea6bd7ee891aa3f5329c950d0775a96c502dcbabf44
-
SSDEEP
49152:eVQyVfvURPaN3Saa7gH56hSpmPOUK42VDER:eVQyVHURPaN3SaaUZ6hSAFK4yER
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d
Files
-
c94f00ed72ab44d708895db9d0121418dc92f865bd231c7fbc05c0fcce5f620d.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ