Static task
static1
Behavioral task
behavioral1
Sample
d58ae9bd3aa477d78a4b208ee5fcc32fb798a0f20ce30aef7a2b98c419b643be.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d58ae9bd3aa477d78a4b208ee5fcc32fb798a0f20ce30aef7a2b98c419b643be.exe
Resource
win10v2004-20240508-en
General
-
Target
d58ae9bd3aa477d78a4b208ee5fcc32fb798a0f20ce30aef7a2b98c419b643be.exe
-
Size
1.5MB
-
MD5
136fe5a45a9e08721c4ee8ae540e7c43
-
SHA1
be023d1cdb3625ea61f9c6733aafdbc30776462d
-
SHA256
d58ae9bd3aa477d78a4b208ee5fcc32fb798a0f20ce30aef7a2b98c419b643be
-
SHA512
673af0f9a91f03f990a622aa146e1245d4fe9730f6704e4e6e29ac6bfc9426b15e780292b909f4d6cfcbef845b847b2fceeda5c64db874ede44b30710f839473
-
SSDEEP
24576:EwHQn+qL3www7jkU22gQHix+AtqHodbwWNkVS9SONQ813m:ETd3D2jH229C+OZy88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d58ae9bd3aa477d78a4b208ee5fcc32fb798a0f20ce30aef7a2b98c419b643be.exe
Files
-
d58ae9bd3aa477d78a4b208ee5fcc32fb798a0f20ce30aef7a2b98c419b643be.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ