Static task
static1
Behavioral task
behavioral1
Sample
64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d.exe
Resource
win10v2004-20241007-en
General
-
Target
64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d
-
Size
3.9MB
-
MD5
fdb738d0e670947b4be64440faf891de
-
SHA1
8d167df4a9c609b4b93ce7e7fdaa021d1aba819a
-
SHA256
64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d
-
SHA512
e5887a66c7e0525e4faf200dd17e151e274702966d0fd3c8a7d836622ec30e5a0ca5fb6a331515cd0feffc7df9748531ded2a6381f5f0b1b084d85752aac9e13
-
SSDEEP
98304:z8U4zmjdvAbRFPjlGqLO9Bcj9agVmpXDwgE7nQhP6KbiRCq0:szmjdvAbTlGqZjfxdhW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d
Files
-
64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 4.0MB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 36KB - Virtual size: 40KB
IMAGE_SCN_MEM_READ