Static task
static1
Behavioral task
behavioral1
Sample
7f55100ef1dcc55b97b46a2cf770600e538f6e3ba12f724a32fad9ee63f4faec.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7f55100ef1dcc55b97b46a2cf770600e538f6e3ba12f724a32fad9ee63f4faec.exe
Resource
win10v2004-20240802-en
General
-
Target
7f55100ef1dcc55b97b46a2cf770600e538f6e3ba12f724a32fad9ee63f4faec
-
Size
14.0MB
-
MD5
e2dc48609499a45167bfe506d753e553
-
SHA1
18ff37bddd7875c675aa39c7fffd7a0fa7100c5f
-
SHA256
7f55100ef1dcc55b97b46a2cf770600e538f6e3ba12f724a32fad9ee63f4faec
-
SHA512
0352faa0dcaa762840e2b109ed77c8f60a45267c3c83ac64120b646f7fd084cc69164a311627aa81d0c04ea07dcb3a83d991d393fc2037eb1ccb81ddae84a9bd
-
SSDEEP
393216:VJOPPpUs5j/CC9FWMYxdI4NZXOOXyMn9VE28IsU:zOJx6RM2ZXOOXyMB80
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f55100ef1dcc55b97b46a2cf770600e538f6e3ba12f724a32fad9ee63f4faec
Files
-
7f55100ef1dcc55b97b46a2cf770600e538f6e3ba12f724a32fad9ee63f4faec.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9.6MB - Virtual size: 14.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE