Static task
static1
Behavioral task
behavioral1
Sample
f040ba6ccaf868a4670853f045cbfcbccccd2fa19688eca15e75c21c4aef2a98.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f040ba6ccaf868a4670853f045cbfcbccccd2fa19688eca15e75c21c4aef2a98.exe
Resource
win10v2004-20240709-en
General
-
Target
f040ba6ccaf868a4670853f045cbfcbccccd2fa19688eca15e75c21c4aef2a98
-
Size
3.9MB
-
MD5
72ce9c04161accedacb7891d4648a2bc
-
SHA1
41abf17774ca4ae7312e2cce7c73868713891242
-
SHA256
f040ba6ccaf868a4670853f045cbfcbccccd2fa19688eca15e75c21c4aef2a98
-
SHA512
edec1ec561f651576e3a6fa36c6cb15ccbcffc01f93608bd5ab33938ff938c8ca9ccef8d8e8cb14e3c0d132776807181622df1474ed3259a2fc38078efe03a27
-
SSDEEP
49152:GY72hJzpaopHuUvXIZ40iibUEBote+Nh:GY72hJzLHuUvXIZ40ieaNh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f040ba6ccaf868a4670853f045cbfcbccccd2fa19688eca15e75c21c4aef2a98
Files
-
f040ba6ccaf868a4670853f045cbfcbccccd2fa19688eca15e75c21c4aef2a98.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ