Static task
static1
Behavioral task
behavioral1
Sample
20d732e529d2c0eb6d936b7d23976084.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
20d732e529d2c0eb6d936b7d23976084.exe
Resource
win10v2004-20231201-en
General
-
Target
20d732e529d2c0eb6d936b7d23976084
-
Size
3.1MB
-
MD5
20d732e529d2c0eb6d936b7d23976084
-
SHA1
8f2c06a2df2271b0f6704ffd19813de736bd4576
-
SHA256
d6e202b7c15626c8e3177c7ee6c82b03bfd41e51d3261f6f8d3c08f36aab0a67
-
SHA512
067ab5e4c62d0a9a108652864f36e9c5c035b4cf97cfbfd6c920b158ab0c10a60dbfeb5cff826673ae21b186c2f10061d6bd320e75ba4846902cde930e20d16c
-
SSDEEP
98304:DNKFfkXMBEWQz/2QN7/tO0jTqssCP7ohbf5Ro21torCsm:pKVEUszh3zkhbMuV9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20d732e529d2c0eb6d936b7d23976084
Files
-
20d732e529d2c0eb6d936b7d23976084.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 1.3MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qtpkicoc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vjhquina Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE