Static task
static1
Behavioral task
behavioral1
Sample
b67b94369aa0f66e0c17805cb1d5249d6d48f34a64a4afb6561f1fde195c47d4.exe
Resource
win10v2004-20240226-en
General
-
Target
b67b94369aa0f66e0c17805cb1d5249d6d48f34a64a4afb6561f1fde195c47d4
-
Size
1.8MB
-
MD5
f20a8515b8d200c756c399b7b6f3aab6
-
SHA1
a709b8e7c6d1cb5dc18ec24cb5cbea937c733c01
-
SHA256
b67b94369aa0f66e0c17805cb1d5249d6d48f34a64a4afb6561f1fde195c47d4
-
SHA512
bc82d39a9c3a7839e156bd45bed4f91973f9e288700b581c750973925de2f295e21fd3b71b8b1cd0839d456467a4f71e020ecfadc97062eb6e3c14a4e58dc92e
-
SSDEEP
24576:Zcu4+MrpB4YRZm5QZ/hBQ1siamnCPD8fq//M6Lf0wfBnCXxUmWZo5vPUpRvQ+Ae1:iu4EKZmulus/7iq//M9p76Vs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b67b94369aa0f66e0c17805cb1d5249d6d48f34a64a4afb6561f1fde195c47d4
Files
-
b67b94369aa0f66e0c17805cb1d5249d6d48f34a64a4afb6561f1fde195c47d4.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mnldkuud Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pnirmody Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE