Static task
static1
Behavioral task
behavioral1
Sample
be1812f78086f3c937fe5c353da6be8c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be1812f78086f3c937fe5c353da6be8c.exe
Resource
win10v2004-20240226-en
General
-
Target
be1812f78086f3c937fe5c353da6be8c
-
Size
1.9MB
-
MD5
be1812f78086f3c937fe5c353da6be8c
-
SHA1
97d15dcd0d659be7822494b65ce773a80255349a
-
SHA256
332174fbda3354cbd01b8d89d8d82d5f8d02355f67e864473c941736aa10323f
-
SHA512
f2be487d37ed63218b521d26df4eaf2cf4a981d089f82b243a364e7ffaa92e25670b4199fa293a03a1eb4756c63eef6a3b89cad1594422db011cb7b6a6f9e995
-
SSDEEP
49152:Egw9BMzsHE495Sym3rnkMoiy28gMsAcnPfSeoW:o/wYjYl3rk4lFMsrnHSeo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be1812f78086f3c937fe5c353da6be8c
Files
-
be1812f78086f3c937fe5c353da6be8c.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 247KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lxtjjndm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dljugbnb Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE