Static task
static1
Behavioral task
behavioral1
Sample
ef04dd89271daf6af7db913e7f6464c1a374b7d34175d36698d0aeff58f8cad3.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef04dd89271daf6af7db913e7f6464c1a374b7d34175d36698d0aeff58f8cad3.exe
Resource
win10v2004-20240709-en
General
-
Target
ef04dd89271daf6af7db913e7f6464c1a374b7d34175d36698d0aeff58f8cad3
-
Size
2.0MB
-
MD5
444dd22db577df10b58b36ff96bcbc1f
-
SHA1
142b49d35f308472734f32222fabb9ceff60611f
-
SHA256
ef04dd89271daf6af7db913e7f6464c1a374b7d34175d36698d0aeff58f8cad3
-
SHA512
1532cd2f4b3a169a1ed9c9b95ff1c5ad850cad3342e1efb501fffbb4aa7f90b1d89f4e716f1b3fdd9b9829510099ebcc529262b86007db670dd09d968b967063
-
SSDEEP
12288:shTmEN8v6uBQTyH+nndbpuc0hXEMb1S7zcsP/CQ4ye/nexT:gBU6VTyHudVFUEi1S7FnR4ye2Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef04dd89271daf6af7db913e7f6464c1a374b7d34175d36698d0aeff58f8cad3
Files
-
ef04dd89271daf6af7db913e7f6464c1a374b7d34175d36698d0aeff58f8cad3.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ