Static task
static1
Behavioral task
behavioral1
Sample
d773db3acad368a5e51b2ea6f4cd5feb904c3255d3ef79cfcd07935a46400e38.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d773db3acad368a5e51b2ea6f4cd5feb904c3255d3ef79cfcd07935a46400e38.exe
Resource
win10v2004-20240426-en
General
-
Target
d773db3acad368a5e51b2ea6f4cd5feb904c3255d3ef79cfcd07935a46400e38.exe
-
Size
688KB
-
MD5
c46f67d07641f91b79606a72b6e09270
-
SHA1
bbbbec60fe589eb39e31a369eea5d0911167ea2b
-
SHA256
d773db3acad368a5e51b2ea6f4cd5feb904c3255d3ef79cfcd07935a46400e38
-
SHA512
517f8bfe7101444fa2ff9b9d6a625dde8193aa6d6bf9326288c5f35f697549527d7d9d5f6f7e2161871b223db0a7124c0323c347d41cefe99bad99d0915438b1
-
SSDEEP
12288:jEAmDvY15gM3Co16QVl0QVXH3CG/ySQvBk0hRfr92bP0fb2RZoIeahAtY7iGUz2:jvb3F4oXCzlvBk0hh4boCXsahPiG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d773db3acad368a5e51b2ea6f4cd5feb904c3255d3ef79cfcd07935a46400e38.exe
Files
-
d773db3acad368a5e51b2ea6f4cd5feb904c3255d3ef79cfcd07935a46400e38.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ