Static task
static1
Behavioral task
behavioral1
Sample
258dfc46e808a08c105a480695734fcf2a2b590130a63fcae6ba20fb22933a72.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
258dfc46e808a08c105a480695734fcf2a2b590130a63fcae6ba20fb22933a72.exe
Resource
win10v2004-20231215-en
General
-
Target
258dfc46e808a08c105a480695734fcf2a2b590130a63fcae6ba20fb22933a72
-
Size
1.2MB
-
MD5
92bb43ef7dfc170b6ebacf5c50173003
-
SHA1
a7c6d49b97e9a0f4f098f2a5525bcc4e177d6876
-
SHA256
258dfc46e808a08c105a480695734fcf2a2b590130a63fcae6ba20fb22933a72
-
SHA512
b26fba3a5f15fc95df95cd0431174061069bee0be76b1c92bd73d03ed2e0c885411094614773732de0c4a372386bc193a16b34bba851bc84a9a410007b0a85be
-
SSDEEP
24576:ZeCz+kKgE/Y8Ajmqzt2NfcVbm+Nh0+rtW3NFu:dKgE/Y8+nzt2NWbm+NBZW9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 258dfc46e808a08c105a480695734fcf2a2b590130a63fcae6ba20fb22933a72
Files
-
258dfc46e808a08c105a480695734fcf2a2b590130a63fcae6ba20fb22933a72.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 44KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uoybfuge Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dnxcozyp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE