Static task
static1
Behavioral task
behavioral1
Sample
453af88f18c2a8321b0a27589f1e5a61a653b1dd4763dbefce8ab5fc6a2a2c1b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
453af88f18c2a8321b0a27589f1e5a61a653b1dd4763dbefce8ab5fc6a2a2c1b.exe
Resource
win10v2004-20240226-en
General
-
Target
453af88f18c2a8321b0a27589f1e5a61a653b1dd4763dbefce8ab5fc6a2a2c1b.exe
-
Size
1.9MB
-
MD5
e7b9fce9d5d9b6d0f9bc5b1ca3835bde
-
SHA1
25f64712b63cec205160b579f8e526bf702c3cc5
-
SHA256
453af88f18c2a8321b0a27589f1e5a61a653b1dd4763dbefce8ab5fc6a2a2c1b
-
SHA512
578d73680cbd7f4c8a3608696d6e6cc93352e845e63791da2b2cf30d4b57244dd2373bc3f761123da4378f1ad560aedc77dc5166114c2bd2ba4c05a3640104f0
-
SSDEEP
49152:3aPyhIA1/NEdLoHh7IvqUqZNNpclBrAxtYH:3aPyhN1CLeFIO/NYBre6H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 453af88f18c2a8321b0a27589f1e5a61a653b1dd4763dbefce8ab5fc6a2a2c1b.exe
Files
-
453af88f18c2a8321b0a27589f1e5a61a653b1dd4763dbefce8ab5fc6a2a2c1b.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kuixdtay Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pwxxorfq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE