Static task
static1
Behavioral task
behavioral1
Sample
1377e5b5bf130a83a79ee3d7def20d9a040f4f5a6f6957d94a3e9a31881c08f7.exe
Resource
win10v2004-20230220-en
General
-
Target
1377e5b5bf130a83a79ee3d7def20d9a040f4f5a6f6957d94a3e9a31881c08f7
-
Size
8.7MB
-
MD5
8a01172cf5f9b2d91e47290b576a90d3
-
SHA1
713d2f44d65d2b1aca7e5550484eb32c34596087
-
SHA256
1377e5b5bf130a83a79ee3d7def20d9a040f4f5a6f6957d94a3e9a31881c08f7
-
SHA512
7d27082b07edc5e1d1a7e7fb9f2155764993e0e4eaaace6b05aae663d5ac6465fd4cd87b93bb09f15577960249fa2b48c7dd471235f33f2052241c00c4fa6616
-
SSDEEP
196608:0X7JIBZCQgtFnzfeFO7ak2pDrl3ejyZMDOtLUZ2JHXY7M6d:gVFXt1ec7vuiCtLi2J3+M6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1377e5b5bf130a83a79ee3d7def20d9a040f4f5a6f6957d94a3e9a31881c08f7
Files
-
1377e5b5bf130a83a79ee3d7def20d9a040f4f5a6f6957d94a3e9a31881c08f7.exe windows x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 6.7MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pgrhrltd Size: 2.0MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ocestyym Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ