Static task
static1
Behavioral task
behavioral1
Sample
62fa25b25a4f2b65b10b62daf2de0fb0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
62fa25b25a4f2b65b10b62daf2de0fb0N.exe
Resource
win10v2004-20240802-en
General
-
Target
62fa25b25a4f2b65b10b62daf2de0fb0N.exe
-
Size
4.3MB
-
MD5
62fa25b25a4f2b65b10b62daf2de0fb0
-
SHA1
721dc9f95ff8b176b6d7a1d5c6a2b82e2f12055a
-
SHA256
6721ff904c96043ea3bc0805ddd5c12e187e0a37811c77afe9d01ea839de0fe2
-
SHA512
6f0b3743d6b1bda196c38d93fd592bbd5b4b6c7f8411a5b31ca0f0ee75343b01369781b9ea3979c6686b54bfa2d30a91677107543d4b1d254288c28de3e19c44
-
SSDEEP
98304:U8tOn50KtJKUDmWgQ8bP2RqWK2eDjvjxJ1b6hZcNIVU9fC6bLL+Bd:DIaKtJJGQ8iRM2efvj11qG9K6XLo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62fa25b25a4f2b65b10b62daf2de0fb0N.exe
Files
-
62fa25b25a4f2b65b10b62daf2de0fb0N.exe.exe windows:6 windows x64 arch:x64
23b3538c5701ca8908c1bdd8290e0524
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetCurrentProcess
user32
GetForegroundWindow
advapi32
RegCloseKey
ntdll
RtlInitUnicodeString
wintrust
WinVerifyTrust
Sections
.text Size: - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 595KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mmT Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.t:n Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9Z| Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ