Static task
static1
Behavioral task
behavioral1
Sample
1964205c3ba627bb974acd0338212de06cf442c95b7b1bd17647a2879407b3d8.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
1964205c3ba627bb974acd0338212de06cf442c95b7b1bd17647a2879407b3d8.exe
Resource
win10v2004-20241007-en
General
-
Target
1964205c3ba627bb974acd0338212de06cf442c95b7b1bd17647a2879407b3d8.exe
-
Size
331KB
-
MD5
56a0eb16583c87251084dee7f8e358d2
-
SHA1
ef8f0c3826a8bfd08a670a68711146d2106886b8
-
SHA256
1964205c3ba627bb974acd0338212de06cf442c95b7b1bd17647a2879407b3d8
-
SHA512
789d4c056d7ef46da0f8614175179351221feee357af49e772ccfa4ad4180e58f1cec33d01e75eb9b0db6801ccbe80d8522f0bebda2e936e7e484944b970e30e
-
SSDEEP
768:RbLdbQe2VzEjss2yXg1ILcn0sspAgpq80Lyg1uMN0+dzsRU+eEyl:R5Q7E/pqrLy0uyz+fyl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1964205c3ba627bb974acd0338212de06cf442c95b7b1bd17647a2879407b3d8.exe
Files
-
1964205c3ba627bb974acd0338212de06cf442c95b7b1bd17647a2879407b3d8.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ