Static task
static1
Behavioral task
behavioral1
Sample
4826b5445a2bd7a2ad98903799571102a3f8a03b835f913a4ef9e3a67b8b08c8.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4826b5445a2bd7a2ad98903799571102a3f8a03b835f913a4ef9e3a67b8b08c8.exe
Resource
win10v2004-20240508-en
General
-
Target
4826b5445a2bd7a2ad98903799571102a3f8a03b835f913a4ef9e3a67b8b08c8
-
Size
615KB
-
MD5
c7e97f90711ca0b0513e4eebae0781f8
-
SHA1
1da9ccf6cbc0fc87bc82fa8aa75abd16681af324
-
SHA256
4826b5445a2bd7a2ad98903799571102a3f8a03b835f913a4ef9e3a67b8b08c8
-
SHA512
01b90577bf7992733d90b53f46c086c51467f840b459b69475cd3fcb26f7f0c24d188261a22f4d28eb668c420d9fd4f4acbedc4e461c602012faf3d7add04016
-
SSDEEP
12288:cSHXKxbR9kjaX0ujKlppa4ji49B/WIGBdLuhv9/WqcLjb4Oa2Q:9HXK5wa6bpa4jJ2IsyhV/WqS1a1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4826b5445a2bd7a2ad98903799571102a3f8a03b835f913a4ef9e3a67b8b08c8
Files
-
4826b5445a2bd7a2ad98903799571102a3f8a03b835f913a4ef9e3a67b8b08c8.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ