Static task
static1
Behavioral task
behavioral1
Sample
69d0c87fdce72d930e0c09bab2ff25a27adc199af12ce7b90bdd5e4950bef097.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69d0c87fdce72d930e0c09bab2ff25a27adc199af12ce7b90bdd5e4950bef097.exe
Resource
win10v2004-20240802-en
General
-
Target
69d0c87fdce72d930e0c09bab2ff25a27adc199af12ce7b90bdd5e4950bef097
-
Size
1.4MB
-
MD5
6e1ba62622465d09fb83a0fb433acdfc
-
SHA1
b1a79fda2944593b85f6bdd6dff0a2b2fa10850e
-
SHA256
69d0c87fdce72d930e0c09bab2ff25a27adc199af12ce7b90bdd5e4950bef097
-
SHA512
bb04af6f01f0f2212cd154e3ba765d0b6f03c2deea05f14b0ecc340fa9c44eb48c58ef687046f4ab17d32e78abf01d46d7d6ba1ef4528cee5547c1c88eacf627
-
SSDEEP
12288:XesvAUGJwgr/8fx0OOTO7e14cw0h8u7vYa9POFTxwRfg1YKmYncwwH75oVcJeQ:XhvACGQe14lSOBxKo1Y9b5QcJeQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69d0c87fdce72d930e0c09bab2ff25a27adc199af12ce7b90bdd5e4950bef097
Files
-
69d0c87fdce72d930e0c09bab2ff25a27adc199af12ce7b90bdd5e4950bef097.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14.2MB - Virtual size: 14.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ