Static task
static1
Behavioral task
behavioral1
Sample
84f127954c54ab48baf0efd275efc3d29350b5ba8fb671c8b54a40e3baca438a.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
84f127954c54ab48baf0efd275efc3d29350b5ba8fb671c8b54a40e3baca438a.exe
Resource
win10v2004-20240802-en
General
-
Target
84f127954c54ab48baf0efd275efc3d29350b5ba8fb671c8b54a40e3baca438a
-
Size
15.5MB
-
MD5
e824f3a806dea9fee9cd8a0965bc75fa
-
SHA1
ffe63c62915994726f4041e11102faa8e7f6a605
-
SHA256
84f127954c54ab48baf0efd275efc3d29350b5ba8fb671c8b54a40e3baca438a
-
SHA512
d9eb82f5948dbd3aec3d772ca602da03e96f54669d3eeaaa1e0eba5f0228f92328bdbdf8330300002604febd2174306a1dfeca2c8ac5b479a3f6beb93d5e8d54
-
SSDEEP
393216:x8aHEV9C4neRCrxQh/2++5MwZJCBWn2aGaCLtTbQyHvEVLJzw:xLHykWeRCrxMOCTS2h6y8VLJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84f127954c54ab48baf0efd275efc3d29350b5ba8fb671c8b54a40e3baca438a
Files
-
84f127954c54ab48baf0efd275efc3d29350b5ba8fb671c8b54a40e3baca438a.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9.2MB - Virtual size: 14.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE