Static task
static1
Behavioral task
behavioral1
Sample
697405a4b420e763880c8834c02e9398dba4fc707626754d0e81429d4e9f34c0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
697405a4b420e763880c8834c02e9398dba4fc707626754d0e81429d4e9f34c0.exe
Resource
win10v2004-20240611-en
General
-
Target
697405a4b420e763880c8834c02e9398dba4fc707626754d0e81429d4e9f34c0
-
Size
607KB
-
MD5
694dcf95070dc0954d8219ac251a58af
-
SHA1
4bb3a962ef5ce7d9b0dbf39dcbc27d93248d7274
-
SHA256
697405a4b420e763880c8834c02e9398dba4fc707626754d0e81429d4e9f34c0
-
SHA512
d23628661710faac0bdf07d542fda42f118307fb9cc88d4d54c05a0f0dc5f9a4ada79354b4dad6506faa92708a59f9b7a9bd49a03ba7e7b53caeb93caf4125d1
-
SSDEEP
12288:um4mfwt3/hTMzXeiurSIdMQ5m00oSnsTpITH2dOHyzuL6Hz:mazzXZp0ZpApHSuLOz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 697405a4b420e763880c8834c02e9398dba4fc707626754d0e81429d4e9f34c0
Files
-
697405a4b420e763880c8834c02e9398dba4fc707626754d0e81429d4e9f34c0.exe .ps1 windows:4 windows x64 arch:x64 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ