Static task
static1
Behavioral task
behavioral1
Sample
807376f59600671c258c4cf5cfaf89b3933bdef73cd425dae5f0e6fc315b3af1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
807376f59600671c258c4cf5cfaf89b3933bdef73cd425dae5f0e6fc315b3af1.exe
Resource
win10v2004-20241007-en
General
-
Target
807376f59600671c258c4cf5cfaf89b3933bdef73cd425dae5f0e6fc315b3af1
-
Size
3.7MB
-
MD5
11f6f0550436ad955c7c2b4f41a94896
-
SHA1
5443a7d9add5d0530621f2dbae5b27bdcf23a565
-
SHA256
807376f59600671c258c4cf5cfaf89b3933bdef73cd425dae5f0e6fc315b3af1
-
SHA512
0ac800c1e460a01f6326c18d508e2db30338e5c0bdd0b2a11eaba81e592e4c13e8f9035a1b1b2c82c6bbe1231a4a67bcec7377d1e1c358b29ddb7e802a25d7f7
-
SSDEEP
98304:35MQvY/NFRjQUEaUJhtH/Ll3AzrIdHM3AUDOE:J0dULh/Ll3grIdHM3AUDOE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 807376f59600671c258c4cf5cfaf89b3933bdef73cd425dae5f0e6fc315b3af1
Files
-
807376f59600671c258c4cf5cfaf89b3933bdef73cd425dae5f0e6fc315b3af1.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 2.7MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE