Static task
static1
Behavioral task
behavioral1
Sample
074d6c9f6bcb79a7237dc74098cacc5d52980d47e830d10ffc7bec92f772deef.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
074d6c9f6bcb79a7237dc74098cacc5d52980d47e830d10ffc7bec92f772deef.exe
Resource
win11-20240419-en
General
-
Target
074d6c9f6bcb79a7237dc74098cacc5d52980d47e830d10ffc7bec92f772deef
-
Size
4.8MB
-
MD5
25dff51680527967cc22d3f9b9049e4d
-
SHA1
93f10058bdb0e626508cf985a82fd3525c06d1aa
-
SHA256
074d6c9f6bcb79a7237dc74098cacc5d52980d47e830d10ffc7bec92f772deef
-
SHA512
9d6ba0c2f62c53021d75fc7964b790ce770e60cd072a13155ebdd174b5bb9f8bfb1e95a52f753d11c62b39e90dee347ca090b99c8fd7e0568c864b530fd62bc5
-
SSDEEP
98304:mr/W3r6YlMD4HsUshjCkWSSVBPhKx8CX/BLdhFQmIJn0VdnxWyDx4:8ur6YRsrIkSThoRrhpiYdnjDx4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 074d6c9f6bcb79a7237dc74098cacc5d52980d47e830d10ffc7bec92f772deef
Files
-
074d6c9f6bcb79a7237dc74098cacc5d52980d47e830d10ffc7bec92f772deef.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ