Start
Static task
static1
Behavioral task
behavioral1
Sample
f0bfde7b2a2540452e62eb4dde43ca081df935c50ca67fc567d4692c2f9ad0c2.exe
Resource
win10v2004-20240226-en
General
-
Target
f0bfde7b2a2540452e62eb4dde43ca081df935c50ca67fc567d4692c2f9ad0c2
-
Size
2.2MB
-
MD5
85829c535f80566ad8faca6f8894515f
-
SHA1
b573165aa2b55cd50c2fb5e76bbc82787049cecd
-
SHA256
f0bfde7b2a2540452e62eb4dde43ca081df935c50ca67fc567d4692c2f9ad0c2
-
SHA512
b4c9330ab0099888c00aee766822e085e9cc7db6f87200b47db749d79dc2229a52ac0b32273b9200d5b2782c3c9fd949467c5cc82f21559bedd0d231ee91aec5
-
SSDEEP
49152:cOQDkZ7xijbsk+x08leKG7YTgrvZKnzAGVJunbV05HMG:c9A7x8skPUESAG/ubVAHF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0bfde7b2a2540452e62eb4dde43ca081df935c50ca67fc567d4692c2f9ad0c2
Files
-
f0bfde7b2a2540452e62eb4dde43ca081df935c50ca67fc567d4692c2f9ad0c2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 562KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fozehjqb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebryxehx Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE