Static task
static1
Behavioral task
behavioral1
Sample
3ac1b63b4ceac3579a7929d89dbf6683cb57e152108e7019d859e53a61c4a916.exe
Resource
win10v2004-20240226-en
General
-
Target
3ac1b63b4ceac3579a7929d89dbf6683cb57e152108e7019d859e53a61c4a916
-
Size
1.9MB
-
MD5
be8519a2eb13ae13c75394a87143061f
-
SHA1
6812b0529a97e04f169c0cd52539aea912161a18
-
SHA256
3ac1b63b4ceac3579a7929d89dbf6683cb57e152108e7019d859e53a61c4a916
-
SHA512
8304c576cc46c8877ca286174fe533fdb10ed020f96e2a68a9c1bf4845f22a8c346eabc97a68fe7038a80156927d88374655129490ec9aef432be2258c45d1b5
-
SSDEEP
49152:mO/AjTowlH6WvRukD8tR8oy39z/rkCEgbGS:m8ooUdvRukw/xy39zygbb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3ac1b63b4ceac3579a7929d89dbf6683cb57e152108e7019d859e53a61c4a916
Files
-
3ac1b63b4ceac3579a7929d89dbf6683cb57e152108e7019d859e53a61c4a916.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ajgksdpn Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mwbxniww Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE