Static task
static1
Behavioral task
behavioral1
Sample
d298f2f23810d9f49cbb2cf9b33587f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d298f2f23810d9f49cbb2cf9b33587f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d298f2f23810d9f49cbb2cf9b33587f0N.exe
-
Size
749KB
-
MD5
d298f2f23810d9f49cbb2cf9b33587f0
-
SHA1
019835ad1ffac855471215d5f63ea3f1b7e3957e
-
SHA256
7f31943a0e6baa3459824b8cc410d2e7310f6e43f264f198ad11d9387be4b9f4
-
SHA512
52672c9732d4d30ac4f5460b5e94f2eba5aadfb8cb295321222edb2cfce3189a54dbb96020bbfb3813661b52a95c6687da0a2aae95c4c2b373322bf7b0a4f5ad
-
SSDEEP
12288:pYIW0p98Oh8P7h8fNnrMuPLtqNLlgjOETn4/5BWpUohOqnDMsMbol/XPRsM:dW298E8ufNgZNLlgjOETn4/5BWpUohOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d298f2f23810d9f49cbb2cf9b33587f0N.exe
Files
-
d298f2f23810d9f49cbb2cf9b33587f0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 219KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ