Static task
static1
Behavioral task
behavioral1
Sample
8aeae31f56f62ae3e274b7cf680dda024f02916fd9c02cf46666ec6e4ea696fd.exe
Resource
win10v2004-20240226-en
General
-
Target
8aeae31f56f62ae3e274b7cf680dda024f02916fd9c02cf46666ec6e4ea696fd
-
Size
1.8MB
-
MD5
f5e8b27416c2b94fe2f33762c7b9c22f
-
SHA1
50f8c30551b1b0753605bac6be0f8bcd046fd13b
-
SHA256
8aeae31f56f62ae3e274b7cf680dda024f02916fd9c02cf46666ec6e4ea696fd
-
SHA512
e645583e9d9b4ffa56616aee695203803506aa583b7fd64799d9d530b2a566586a75843857dc89f48bfe7a077d5d84a3830fc57d4b1ebb48d5b45c71d7a0cccc
-
SSDEEP
49152:awiwFrY0BM37L/xgxQJ2fFFI2B8bKTwSPItJQJR5Em4:awVFrfGLZIQcfjI2yuTwSPwJQJom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8aeae31f56f62ae3e274b7cf680dda024f02916fd9c02cf46666ec6e4ea696fd
Files
-
8aeae31f56f62ae3e274b7cf680dda024f02916fd9c02cf46666ec6e4ea696fd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rbmiinvh Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqkjhzvs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE