Behavioral task
behavioral1
Sample
914ac49c4a5dcbf57feb8d8f90b67379ac257fa944bb751062c0a64506932ba5N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
914ac49c4a5dcbf57feb8d8f90b67379ac257fa944bb751062c0a64506932ba5N.exe
Resource
win10v2004-20241007-en
General
-
Target
914ac49c4a5dcbf57feb8d8f90b67379ac257fa944bb751062c0a64506932ba5N.exe
-
Size
6.0MB
-
MD5
58cce1e2c50f1cd2035868daa1183f30
-
SHA1
27c284f17d20faefc0471ae66e66156fe159a539
-
SHA256
914ac49c4a5dcbf57feb8d8f90b67379ac257fa944bb751062c0a64506932ba5
-
SHA512
41bc30f2e450e34d796c9e5e2698d71b9cb0afcdc43d15176805b174a088d6a6b27e5fd7d2dab34ceb87f8525e8fb04278318f3ef379ff37a64cf12705676269
-
SSDEEP
98304:xX+ZGhCrY9Fr8af3Cy+UsPQ4mtBuvQbmRPFWEr38QcdfQZcht/c5ilvTilNZwmMp:xuZTc9yaKy+UsPatBuYyPQEadfQZSK
Malware Config
Signatures
-
Privateloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 914ac49c4a5dcbf57feb8d8f90b67379ac257fa944bb751062c0a64506932ba5N.exe
Files
-
914ac49c4a5dcbf57feb8d8f90b67379ac257fa944bb751062c0a64506932ba5N.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp`*0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp`*1 Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp`*2 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 64KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ