Static task
static1
Behavioral task
behavioral1
Sample
990878.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
990878.exe
Resource
win10v2004-20240508-en
General
-
Target
990878.exe
-
Size
618KB
-
MD5
54f0b581dc68bdb8c7688c7f487d1b21
-
SHA1
09c3cb43c8ed5f56981e92ed7f6ff0716d0f2a41
-
SHA256
9475be4628deed5579376dc744d792deeeba51b9f715be4820018bda40e90f9f
-
SHA512
16abbac4d6bd9bf652e5cd833a78c77059229de3a15d9cd349cd454b05464d50b4a96d883ab9bc1e16a79f8cfc93fc75069072bafe3b6510389acc6192734aaf
-
SSDEEP
12288:c7Hrf1Otzbv0DgN3xq/zN6GBM+HNbwEpMuli9lSVRrC67U:CD1CnA03Yo+tJsl6rC67U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 990878.exe
Files
-
990878.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ