Static task
static1
Behavioral task
behavioral1
Sample
4aa184f3d403f654d3f8f95c4d0ab3808bce53a4404974e0e67b9406fcae9074.exe
Resource
win10v2004-20240226-en
General
-
Target
4aa184f3d403f654d3f8f95c4d0ab3808bce53a4404974e0e67b9406fcae9074
-
Size
1.8MB
-
MD5
e17c58a27f3a3370da51fc0de68349cf
-
SHA1
ba28aef2cc70999fe31fb185457ba4584fb7206b
-
SHA256
4aa184f3d403f654d3f8f95c4d0ab3808bce53a4404974e0e67b9406fcae9074
-
SHA512
5dd1da7df60727b6e87d0a49599f6d03238237c7dfb9a3801e4c014bce9d4c8ab92f6d4d877a752f61a2f165f637ef64918a96397a87a5b779dd0f21eac87c1a
-
SSDEEP
49152:3owuakco8AEoyhy6rUDK7kb8i+4nr/lF:lLA819sfb8TArdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aa184f3d403f654d3f8f95c4d0ab3808bce53a4404974e0e67b9406fcae9074
Files
-
4aa184f3d403f654d3f8f95c4d0ab3808bce53a4404974e0e67b9406fcae9074.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bknzxplr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
laqpkghx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE