Static task
static1
Behavioral task
behavioral1
Sample
efc5b78dc1faef417f45e206f67d65c4677d63201b3327fc602af5e2265ad9cd.exe
Resource
win10v2004-20240226-en
General
-
Target
efc5b78dc1faef417f45e206f67d65c4677d63201b3327fc602af5e2265ad9cd
-
Size
1.8MB
-
MD5
4a6648001597e18b66583a0cb4acf0a3
-
SHA1
216214d33e9e6ab1f40649cfc1647abc30f91ed3
-
SHA256
efc5b78dc1faef417f45e206f67d65c4677d63201b3327fc602af5e2265ad9cd
-
SHA512
896f3da600061f7c264ea175fa1d04271feddae66993f9db6690509348916e2c05df1c2117209909bf433c31ad5eb8aac438d148c6495c18be8a11e55516ca9f
-
SSDEEP
49152:1C9J/8G7mO5SRh5Nxdu5WEWIh3nIG3ik8:KZ7h5S35Nxg5phh3nIG3h8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource efc5b78dc1faef417f45e206f67d65c4677d63201b3327fc602af5e2265ad9cd
Files
-
efc5b78dc1faef417f45e206f67d65c4677d63201b3327fc602af5e2265ad9cd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdretqek Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mktzdoxu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE