Static task
static1
Behavioral task
behavioral1
Sample
22e4c9489e8ea70cf049a923e4c5684ef452c06478330e92c5aff915c59edd21.exe
Resource
win10v2004-20240226-en
General
-
Target
22e4c9489e8ea70cf049a923e4c5684ef452c06478330e92c5aff915c59edd21
-
Size
1.8MB
-
MD5
9f1131b52d56f4674109fb3024622484
-
SHA1
f52d12d6b2cb20faa8efb2b907acc00ea17b10bb
-
SHA256
22e4c9489e8ea70cf049a923e4c5684ef452c06478330e92c5aff915c59edd21
-
SHA512
3c33640e15fc45006d3ece9282a49f0c7f279062f4317deabacb381dc7e0ee8215faf8b93d93b7c4ad01bd6ed9bb6e0a735d0caff77c44684a4a246e4540d825
-
SSDEEP
24576:9DtaCLTFYHoOlfbWlScp/D9oO4h/+ay3uIThqNQpLWrzGizkqJrWko3QUKqxcL4i:9DtaCnFq5ZXhi+vQiNriY4Y8mUob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 22e4c9489e8ea70cf049a923e4c5684ef452c06478330e92c5aff915c59edd21
Files
-
22e4c9489e8ea70cf049a923e4c5684ef452c06478330e92c5aff915c59edd21.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xfmfyezq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ravhmkqs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE