Start
Static task
static1
Behavioral task
behavioral1
Sample
133b2c3fc071e434da493055821b3ee1ad9bee5226e9cd5a5514b6d960211b99.exe
Resource
win10v2004-20240226-en
General
-
Target
133b2c3fc071e434da493055821b3ee1ad9bee5226e9cd5a5514b6d960211b99
-
Size
3.0MB
-
MD5
5c830c3cca26d7e7f9d579ee12506745
-
SHA1
111fa886fb04e1b936dc3b78db991c76c700b298
-
SHA256
133b2c3fc071e434da493055821b3ee1ad9bee5226e9cd5a5514b6d960211b99
-
SHA512
4392f2cf0a20c172bd17b43460c6212595bb4fb730493154facd1608284f4d8cd82c7714c6a1702dfae1bef060f71ece5ef281738e306a1d64d9c8b99e6351ad
-
SSDEEP
49152:l6hmwRozqdcDCeZUToQq5FWtKKQxErNq:laozweZwoQq5FWMKQx+Nq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 133b2c3fc071e434da493055821b3ee1ad9bee5226e9cd5a5514b6d960211b99
Files
-
133b2c3fc071e434da493055821b3ee1ad9bee5226e9cd5a5514b6d960211b99.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 562KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tirnaqeu Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crunyrcy Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE