Static task
static1
Behavioral task
behavioral1
Sample
371be643e90ad6f4d63209b2409da79b2d96ef463258844bffd2bad636d4af11.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
371be643e90ad6f4d63209b2409da79b2d96ef463258844bffd2bad636d4af11.exe
Resource
win10-20240404-en
General
-
Target
371be643e90ad6f4d63209b2409da79b2d96ef463258844bffd2bad636d4af11
-
Size
4.7MB
-
MD5
bca4c47d332ba27ec6bf061a88989ce9
-
SHA1
5a7c6c5557e912cd3a2435246d593f9ba63ef96c
-
SHA256
371be643e90ad6f4d63209b2409da79b2d96ef463258844bffd2bad636d4af11
-
SHA512
f5001ad9f4b52bcd00d11ef3541738a67aa4f7a0708ac4a8589f19a65b714c5795bdcb0df92f56fd27eb513c4a27d31b2b2635a6ab4018fe5570cc399626ee27
-
SSDEEP
98304:m6AjF+ie7Z7rBgFtMsd3YiUxA7wG1dX5Zj3tDMK9yxXCynX:lOFDed7r+pd3GxAn1dpZzpMKckE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 371be643e90ad6f4d63209b2409da79b2d96ef463258844bffd2bad636d4af11
Files
-
371be643e90ad6f4d63209b2409da79b2d96ef463258844bffd2bad636d4af11.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ