Static task
static1
Behavioral task
behavioral1
Sample
7e1d752bf5e48beaee791bf713faa0c6f775615a6c3510c4fcb2f0a26bee8c2fN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7e1d752bf5e48beaee791bf713faa0c6f775615a6c3510c4fcb2f0a26bee8c2fN.exe
Resource
win10v2004-20241007-en
General
-
Target
7e1d752bf5e48beaee791bf713faa0c6f775615a6c3510c4fcb2f0a26bee8c2fN
-
Size
1.1MB
-
MD5
2824357a38956899bfdb67611b2dc580
-
SHA1
ffc7d3563d0f3f631247862374c80addb88a082d
-
SHA256
7e1d752bf5e48beaee791bf713faa0c6f775615a6c3510c4fcb2f0a26bee8c2f
-
SHA512
23d827361396e6d733fb46e488a7bece6097c3d744cbfaaf9aa22f060d4f7c394241a54d9e82035ec108d0711d80aa0f4daddabae566f53ba919bddd973d6b11
-
SSDEEP
24576:rl0JTewBi+2S9gFdQ5HUoZ/5dTgIh2DGla6LwAtml/MS0l2YWr:x0J6SiuHT/vh2DGlvfml/I25
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7e1d752bf5e48beaee791bf713faa0c6f775615a6c3510c4fcb2f0a26bee8c2fN
Files
-
7e1d752bf5e48beaee791bf713faa0c6f775615a6c3510c4fcb2f0a26bee8c2fN.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Face Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE