Static task
static1
Behavioral task
behavioral1
Sample
74b59a3e1afce820ede35fed8e2d3308c08a1bc6965ece0a584bca8cb48b3b48.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
74b59a3e1afce820ede35fed8e2d3308c08a1bc6965ece0a584bca8cb48b3b48.exe
Resource
win10v2004-20240508-en
General
-
Target
74b59a3e1afce820ede35fed8e2d3308c08a1bc6965ece0a584bca8cb48b3b48
-
Size
10.5MB
-
MD5
caadb91710d22ce4eeb048ed4affe35e
-
SHA1
3bae01b5ffe18a771ae96487d4b55b364b376489
-
SHA256
74b59a3e1afce820ede35fed8e2d3308c08a1bc6965ece0a584bca8cb48b3b48
-
SHA512
d24893fc1ed6576309feda82966940466ee6d48683e8c78f2c1fc8334200f03d08223b907cf8b1c68c914e8f4c44efc21ab5b1cd4f7dfb971b13d6684b1e8061
-
SSDEEP
196608:Qc8Oy21GAMhfo07JSUmBz5DO+TE3M29DyzxNz6yxrFa/HBetkT:VK21GAmJSpbDN+cNrkHN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74b59a3e1afce820ede35fed8e2d3308c08a1bc6965ece0a584bca8cb48b3b48
Files
-
74b59a3e1afce820ede35fed8e2d3308c08a1bc6965ece0a584bca8cb48b3b48.exe windows:4 windows x86 arch:x86
1b543238789165fd55ca1f7fea5cae16
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
GetUserObjectInformationW
advapi32
QueryServiceStatusEx
Sections
Size: - Virtual size: 9.8MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE