Start
Static task
static1
Behavioral task
behavioral1
Sample
b9e7202a39277225790391588efb7b77400fa4706e92f2e0f7aa4dca1e0f9e47.exe
Resource
win10v2004-20240226-en
General
-
Target
b9e7202a39277225790391588efb7b77400fa4706e92f2e0f7aa4dca1e0f9e47
-
Size
2.9MB
-
MD5
a99252187233695531f8684246fe4b48
-
SHA1
db3ce51bcabb9f21de611e57fb510adbdfe09ebf
-
SHA256
b9e7202a39277225790391588efb7b77400fa4706e92f2e0f7aa4dca1e0f9e47
-
SHA512
d6662b5838411be2e12b0bc301f6b5a3daba8e2add73f0568e7cc9d2ee2aa481e4b2893e5d0b9f9728ec935341ab2e23d3dbfab5fc012334925c3f25f4a60b1b
-
SSDEEP
49152:1T6/Zkz91Ash0PBxl2Scp3mvWa5RmmzFkgAja8v:1TD4C0PBxkScp3m+a572E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e7202a39277225790391588efb7b77400fa4706e92f2e0f7aa4dca1e0f9e47
Files
-
b9e7202a39277225790391588efb7b77400fa4706e92f2e0f7aa4dca1e0f9e47.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 562KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nonpyrvm Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kvlcgcea Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE