Static task
static1
Behavioral task
behavioral1
Sample
216c0539ccfc639a2638c1d86d5af4accd3dd621c1372c1277432349f2977eca.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
216c0539ccfc639a2638c1d86d5af4accd3dd621c1372c1277432349f2977eca.exe
Resource
win10v2004-20240426-en
General
-
Target
216c0539ccfc639a2638c1d86d5af4accd3dd621c1372c1277432349f2977eca.exe
-
Size
616KB
-
MD5
0c937b5c2726ead914f467f4458fb30c
-
SHA1
f1d0c49c593499e9190bcb796a0cd7292fbfeea6
-
SHA256
216c0539ccfc639a2638c1d86d5af4accd3dd621c1372c1277432349f2977eca
-
SHA512
d9403de28b2bf85cf7d0cf2390497016cf3e00255486eed84223bd97a5e41e21ebfd9218056e082bf745d4d7fdf7a712b72559358d2118eda6141222539a1231
-
SSDEEP
12288:k9Xl+wonve99dbGPG+gibay1WTIlLuRtjI0THYWsuFFu5KmgsHL:kLRovq78GniOTTyLurk0TQNio
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 216c0539ccfc639a2638c1d86d5af4accd3dd621c1372c1277432349f2977eca.exe
Files
-
216c0539ccfc639a2638c1d86d5af4accd3dd621c1372c1277432349f2977eca.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ