Static task
static1
Behavioral task
behavioral1
Sample
3f5f50fd2cd9b5a4c0fa0467f2556215a37af812759d8d525857c69fd8c2ae1f.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
3f5f50fd2cd9b5a4c0fa0467f2556215a37af812759d8d525857c69fd8c2ae1f.exe
Resource
win11-20240221-en
General
-
Target
3f5f50fd2cd9b5a4c0fa0467f2556215a37af812759d8d525857c69fd8c2ae1f
-
Size
1.8MB
-
MD5
46d3d63332720092aa6a53bd98217b43
-
SHA1
74ad2045d51545496d185e915c66979172c992cb
-
SHA256
3f5f50fd2cd9b5a4c0fa0467f2556215a37af812759d8d525857c69fd8c2ae1f
-
SHA512
8074a073612546545818be4214d115757ed24cf43bf99144604157172ab8bbe1e4485a71102cce5b5863d1cbd68f610a6866399bea47053fe20072eeb982bf19
-
SSDEEP
49152:CBbaJQKFFTs391ERDE30XFGLCEATiA19IQFU:CAJQzkSOFA9A2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3f5f50fd2cd9b5a4c0fa0467f2556215a37af812759d8d525857c69fd8c2ae1f
Files
-
3f5f50fd2cd9b5a4c0fa0467f2556215a37af812759d8d525857c69fd8c2ae1f.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
skzcicez Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lkzbwmxx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE