Static task
static1
Behavioral task
behavioral1
Sample
payload_1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
payload_1.exe
Resource
win10v2004-20250129-en
General
-
Target
payload_1.exe
-
Size
10.3MB
-
MD5
193c0f25237bf72feba33c0ac094633f
-
SHA1
49d04b78ac3abed78f63f2a417aaaa3b2df015d0
-
SHA256
f8431dd48bff13d43e84636a28c6f718f94c3fbaabfdc4505ba1c49390410dd0
-
SHA512
f876fe18aa868e6b5fcca10e8def67f65be948283234c09cce5ab87938b1e797567498f6cc30ce7cd9bff3dd31a98a382bd950e1d49e1d782cce667516e62dd8
-
SSDEEP
49152:AHZtA2qbxwSAKPbSZ8ncZSgiGrgXfaZAfCjCQquQplaoMc30D8zyYEF2SSmbUsr+:A54
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource payload_1.exe
Files
-
payload_1.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ