Static task
static1
Behavioral task
behavioral1
Sample
a53ef4b467ce8ba070ff2ef6c2806105db1e132feef962873387216c4ef6af40.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a53ef4b467ce8ba070ff2ef6c2806105db1e132feef962873387216c4ef6af40.exe
Resource
win10v2004-20240802-en
General
-
Target
a53ef4b467ce8ba070ff2ef6c2806105db1e132feef962873387216c4ef6af40
-
Size
2.0MB
-
MD5
0cae79f8d7c8d762c3a55116a4a2cfda
-
SHA1
d42fefcfc374280d29c87508225261e01f6795ef
-
SHA256
a53ef4b467ce8ba070ff2ef6c2806105db1e132feef962873387216c4ef6af40
-
SHA512
2c05bac4220a5a99cd29af04ae7272ff8d013cd16bfb223a5256ba2e0b751d8f7b0dda85835d5f4ef552e8dc9cbc2f885cd47621e4bd89b1ede56acb500f65db
-
SSDEEP
24576:iX4a055DGBvgWGawtCU7IG+FaX/V7wNBJMq/p:iX456KWbprG+FSlwN08p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a53ef4b467ce8ba070ff2ef6c2806105db1e132feef962873387216c4ef6af40 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
a53ef4b467ce8ba070ff2ef6c2806105db1e132feef962873387216c4ef6af40.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 984KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ