Static task
static1
Behavioral task
behavioral1
Sample
909b4092841b4056937777a197673e86be281f43db661ee636ccd73744015768.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
909b4092841b4056937777a197673e86be281f43db661ee636ccd73744015768.exe
Resource
win10v2004-20240426-en
General
-
Target
909b4092841b4056937777a197673e86be281f43db661ee636ccd73744015768.exe
-
Size
864KB
-
MD5
1a0d7a2a1e9ef04c516c7ac650ba0593
-
SHA1
5539262df6253bb9958b115deb03147286e2e9f6
-
SHA256
909b4092841b4056937777a197673e86be281f43db661ee636ccd73744015768
-
SHA512
2e20945c03181fbad13be970dc32824d339686c6a63fe41cdc934dc7823c87890521260d18829c0c2a03f2a83b684dfe54e2a5edd0088036e2c18a41ba3f73c6
-
SSDEEP
12288:9RYME1O4s1ZQwyyUkb7Mb0ERfd31PS0aqqNNibhvFChjELzjAG+YFKxLJErKpfa:MrcZtUI7MQCF31PUnYvFClshCNEaa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 909b4092841b4056937777a197673e86be281f43db661ee636ccd73744015768.exe
Files
-
909b4092841b4056937777a197673e86be281f43db661ee636ccd73744015768.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ