Static task
static1
Behavioral task
behavioral1
Sample
d504e0e2a856ac6f26d5d83e1d7ed1f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d504e0e2a856ac6f26d5d83e1d7ed1f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d504e0e2a856ac6f26d5d83e1d7ed1f0N.exe
-
Size
378KB
-
MD5
d504e0e2a856ac6f26d5d83e1d7ed1f0
-
SHA1
53a442008853942c6b2d9c83cc557886f5a9122e
-
SHA256
268814b374c4974f233aec5265aeb102efad3811c9b48831bcbfa9e9d8ca9ca7
-
SHA512
f99cc61b1a359ce36085340be4bcc1d7a98297d0e84f20d0ac7af5cee20c102e905ec182fc9c7c6a9f827e403492127a0a54b7644c70e3ad76d4c886ae5c5df8
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/blj:Os52hzpHq8eTi30yIQrDlj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d504e0e2a856ac6f26d5d83e1d7ed1f0N.exe
Files
-
d504e0e2a856ac6f26d5d83e1d7ed1f0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE