Static task
static1
Behavioral task
behavioral1
Sample
608bf79f55ee1cc18a425b62b79981d2c5ea6d25fd4b2d44feef0bb20a505a1f.exe
Resource
win10v2004-20240226-en
General
-
Target
608bf79f55ee1cc18a425b62b79981d2c5ea6d25fd4b2d44feef0bb20a505a1f
-
Size
1.8MB
-
MD5
2bde26322e0e1ff6b5e4fdb2fee9f603
-
SHA1
989c9014b294a41b25666e5007f4670ce70ff371
-
SHA256
608bf79f55ee1cc18a425b62b79981d2c5ea6d25fd4b2d44feef0bb20a505a1f
-
SHA512
0960594d61cd065703d4455301930b6ceba923c8cdb3a23f9822b2e6f60db8458e559d1d9024dc2d1f6ca29793dc99f9ee0b97cad9167d76e3910adda561393d
-
SSDEEP
49152:GGp8D+1RQogFUo3K830BFE6svWq3/QXJMIuK8ZUIeZi9PaID:rpbrGUxuQ0uqEmKOeyyI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 608bf79f55ee1cc18a425b62b79981d2c5ea6d25fd4b2d44feef0bb20a505a1f
Files
-
608bf79f55ee1cc18a425b62b79981d2c5ea6d25fd4b2d44feef0bb20a505a1f.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pazendtn Size: 1.6MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pxixuhku Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE