Static task
static1
Behavioral task
behavioral1
Sample
95dd45f03de6822f428acdbb28fbd93a20d79b3721cc9398083e7a61667876dd.exe
Resource
win10v2004-20240226-en
General
-
Target
95dd45f03de6822f428acdbb28fbd93a20d79b3721cc9398083e7a61667876dd
-
Size
1.8MB
-
MD5
3368b366cd79bb42b36ed56d46829497
-
SHA1
3e3dbd37f0e5f9242730a7c4ec6be100e5f8b5e1
-
SHA256
95dd45f03de6822f428acdbb28fbd93a20d79b3721cc9398083e7a61667876dd
-
SHA512
081d45a88d0ce6c02187a78dab9acb04566e8c0060285da7b63da5dcd9bfdc42bc4a27cbbd0250b55b3918469b706df69bb44e46a651daecb77661fc99bc503f
-
SSDEEP
49152:xlbpp54DqYVv8Vb0xN68ozi9NnpIbVb4CFhU5Q:DacwxNj9NpmxrmQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 95dd45f03de6822f428acdbb28fbd93a20d79b3721cc9398083e7a61667876dd
Files
-
95dd45f03de6822f428acdbb28fbd93a20d79b3721cc9398083e7a61667876dd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wumnmxpa Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oabxkujy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE