Static task
static1
Behavioral task
behavioral1
Sample
79f957c05a0a15d2f7bcdd66f5cbc98aa2cd66b5edc8d626325a29ca0794b326.exe
Resource
win10v2004-20240226-en
General
-
Target
79f957c05a0a15d2f7bcdd66f5cbc98aa2cd66b5edc8d626325a29ca0794b326
-
Size
1.9MB
-
MD5
49505a5eba105eecce0b577d88b4fcef
-
SHA1
435f283fafe6adc255c6b454cc3e34c0feef5100
-
SHA256
79f957c05a0a15d2f7bcdd66f5cbc98aa2cd66b5edc8d626325a29ca0794b326
-
SHA512
472f9b05a97365d731f26368ceb0eec9b66a5a7d0a4909ec188b4f25069b374058c36763ac4db33c22a14cbd683765572705a6f6783eadd6c37f76b281a19ebd
-
SSDEEP
49152:QJyVKtP2GATw21kSwXAnwb4OeVKRGHZX2:QJyVKtPzSw21kg+4egg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 79f957c05a0a15d2f7bcdd66f5cbc98aa2cd66b5edc8d626325a29ca0794b326
Files
-
79f957c05a0a15d2f7bcdd66f5cbc98aa2cd66b5edc8d626325a29ca0794b326.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uhtyniys Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vxgybcbp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE