Static task
static1
Behavioral task
behavioral1
Sample
545a2470af94526d3ba263c7077a2f63289d7d6aa633ff1903f0db7c01895970.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
545a2470af94526d3ba263c7077a2f63289d7d6aa633ff1903f0db7c01895970.exe
Resource
win10v2004-20241007-en
General
-
Target
545a2470af94526d3ba263c7077a2f63289d7d6aa633ff1903f0db7c01895970
-
Size
36KB
-
MD5
393b3c5842a4c68f342ebb779f5fc5c6
-
SHA1
eac44bda190c7ebbdc659a08868cff904e5e103f
-
SHA256
545a2470af94526d3ba263c7077a2f63289d7d6aa633ff1903f0db7c01895970
-
SHA512
57747d2104b45ee00be0d5efeeda8e05a2896702f3ff8c0990e44f80cca8c3466dd6ad837d4a7258af7a9a5ba536d8674aca06aff9c0b5b3fdc7c19da33a21af
-
SSDEEP
384:E8g0U0fLMzyKbNzzyKbNWkq3DLXakq3DLXavqPSaYtuSaYtoc:pgnKLMWK9WKD2N2LSarSa/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 545a2470af94526d3ba263c7077a2f63289d7d6aa633ff1903f0db7c01895970
Files
-
545a2470af94526d3ba263c7077a2f63289d7d6aa633ff1903f0db7c01895970.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ