Static task
static1
Behavioral task
behavioral1
Sample
dc0ebfe17adf7d61297fbcedfd5baead95605f95e2d3d232374175c19a0dbe44.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dc0ebfe17adf7d61297fbcedfd5baead95605f95e2d3d232374175c19a0dbe44.exe
Resource
win10v2004-20240508-en
General
-
Target
dc0ebfe17adf7d61297fbcedfd5baead95605f95e2d3d232374175c19a0dbe44
-
Size
2.1MB
-
MD5
4d5bd9441dbcfb6fe6d9c235c4a7d7ba
-
SHA1
37063602eb56d31d93bff61df6f912d4581ef5c4
-
SHA256
dc0ebfe17adf7d61297fbcedfd5baead95605f95e2d3d232374175c19a0dbe44
-
SHA512
49d0dc5206d04381101259d03ce4db2cc062547d6c4ad3df839c05a08bb5ed57fb68e3c4673a1a4b09d7383869b0a37b271824e2acfc2e2987c90a7a2d275ae9
-
SSDEEP
49152:7JJ2bqT3hWdXmiSq+kqXfd+/9A+8ArSt+JE7fbVWQdSf2zj+:NJ2GTsB13+kqXf0FkArS4m7RV+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc0ebfe17adf7d61297fbcedfd5baead95605f95e2d3d232374175c19a0dbe44
Files
-
dc0ebfe17adf7d61297fbcedfd5baead95605f95e2d3d232374175c19a0dbe44.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ