Static task
static1
Behavioral task
behavioral1
Sample
Hotmail Checker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Hotmail Checker.exe
Resource
win10v2004-20240802-en
General
-
Target
Hotmail Checker.exe
-
Size
966KB
-
MD5
fcb168532c560d0b28f809f8f701a4f2
-
SHA1
9bdaa9ecb7ffdb22ad8bb7b27bd35a1fd46c672e
-
SHA256
0a1118675ef2642dd1ec08cadebed77a5518666e632c22d761ea6cab71b8edd9
-
SHA512
676713ee275933b07f829a824fcba5632b05b8977a08d0762d690eed11dfc9d2e738eeeaf5a8100bdbf28529ff9d5eacf712888abf52f88fc47983f17025b139
-
SSDEEP
6144:RV9r13lIEyuaMER4/h3oNw/y0YomfJ3bx8rPXhLfqyo0Fk:RVNlWEoco2y0YDdbx8zNfq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Hotmail Checker.exe
Files
-
Hotmail Checker.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 626KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ