Static task
static1
Behavioral task
behavioral1
Sample
47753e02aa1e1dc51f0f9468f701241c08ceceed27d4f9508e1e7c70708ed766N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
47753e02aa1e1dc51f0f9468f701241c08ceceed27d4f9508e1e7c70708ed766N.exe
Resource
win10v2004-20240802-en
General
-
Target
47753e02aa1e1dc51f0f9468f701241c08ceceed27d4f9508e1e7c70708ed766N.exe
-
Size
2.9MB
-
MD5
ecfaa220a7083ed0705bdc1003eb5020
-
SHA1
aa8af0decbb087eb7cf10c54fdf9e806a080b88a
-
SHA256
47753e02aa1e1dc51f0f9468f701241c08ceceed27d4f9508e1e7c70708ed766
-
SHA512
96eade18a189c2d6d83b916fd06004b2578d7df3a26a2cd22807f0a3d5d4b948efbd03a82b3797a82e37136d46d3ad279184cad599ac20b9a6db7a5242f34f2c
-
SSDEEP
49152:O5ni8cy7cFkZkViIa8f+/1mN9aw//P40skbFiNzVDrIr:O88cHkZkVi6ywnUkbM3Dcr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47753e02aa1e1dc51f0f9468f701241c08ceceed27d4f9508e1e7c70708ed766N.exe
Files
-
47753e02aa1e1dc51f0f9468f701241c08ceceed27d4f9508e1e7c70708ed766N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 357KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 150B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stabstr Size: 694KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 774KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 746KB - Virtual size: 746KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.theta Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE