Static task
static1
Behavioral task
behavioral1
Sample
b3440eca83ef91708410f9ff328b605c50a8ca8ba0a9428703e9d5fe6dd9eefd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b3440eca83ef91708410f9ff328b605c50a8ca8ba0a9428703e9d5fe6dd9eefd.exe
Resource
win10v2004-20240508-en
General
-
Target
b3440eca83ef91708410f9ff328b605c50a8ca8ba0a9428703e9d5fe6dd9eefd.exe
-
Size
516KB
-
MD5
4ed3b0d6ac9550e9164ca7e9c2ddebaf
-
SHA1
91d57eb738d0e4147a6fcd6b277315b67a7fcf20
-
SHA256
b3440eca83ef91708410f9ff328b605c50a8ca8ba0a9428703e9d5fe6dd9eefd
-
SHA512
9e2e6464f359a39ee0410454d0581a2f087d8dd826da287371cd61d12cdaf5beb84935623b47ad36f7e49138e3881439c2dd86bf2dd8fc9fcf2a0d90f6840b9d
-
SSDEEP
12288:3j3vFsUQIvCZKrlpLzFq2NBGuErD9ZMshdub1VtumXD:T3vFh0Krn7DyUs6b16ID
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b3440eca83ef91708410f9ff328b605c50a8ca8ba0a9428703e9d5fe6dd9eefd.exe
Files
-
b3440eca83ef91708410f9ff328b605c50a8ca8ba0a9428703e9d5fe6dd9eefd.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ