Static task
static1
Behavioral task
behavioral1
Sample
8b52f08ea571964e542781190341352eaff60bb59d1c753318281987e2beeefdN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8b52f08ea571964e542781190341352eaff60bb59d1c753318281987e2beeefdN.exe
Resource
win10v2004-20241007-en
General
-
Target
8b52f08ea571964e542781190341352eaff60bb59d1c753318281987e2beeefdN.exe
-
Size
4.5MB
-
MD5
53ee1540be7973bb9faef6609eae6b40
-
SHA1
2780ca31c48d28346e040d06e1341a28351aa1be
-
SHA256
8b52f08ea571964e542781190341352eaff60bb59d1c753318281987e2beeefd
-
SHA512
c801c77431845f4228dc11b0da2c2ee8f52b4be7cf2c695407198bb97200daee89c63ec3c7626638bc55a2f3598a0befd2cca606fe9b7088742475a2d338ba83
-
SSDEEP
98304:RIGQJSTCuRY/keyYe/Ex1FVFL8IBGJKEDNn4qbUUSnRomB5:aGpzUymxNFL83l+q7g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b52f08ea571964e542781190341352eaff60bb59d1c753318281987e2beeefdN.exe
Files
-
8b52f08ea571964e542781190341352eaff60bb59d1c753318281987e2beeefdN.exe.exe windows:6 windows x64 arch:x64
2a59f9fe8433ed948baf913049e691f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
getsockname
crypt32
CertFreeCertificateContext
kernel32
EnumSystemLocalesW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetUserObjectInformationW
advapi32
CryptGenRandom
shell32
ShellExecuteA
Sections
.text Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1007KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fptable Size: - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Falconc Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Falconc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Falconc Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ