Static task
static1
Behavioral task
behavioral1
Sample
da37125bf485fab5537538b860552ab528e486499b88cfa30830d0c851f7797c.exe
Resource
win10v2004-20240226-en
General
-
Target
da37125bf485fab5537538b860552ab528e486499b88cfa30830d0c851f7797c
-
Size
1.8MB
-
MD5
94063ff0b47e7ae85590a66f64b98e55
-
SHA1
f760407e5a3ecd068a21297be78eeb6e4c98b21d
-
SHA256
da37125bf485fab5537538b860552ab528e486499b88cfa30830d0c851f7797c
-
SHA512
0214d71438db5beea1c68cc6861dcd2eff2e1de1ee969345489c9676a861c42be2b1253f578c4bce0a4b7db9cc401e453cc651b61220bcd9392a5dc8f9e12187
-
SSDEEP
49152:YHCsReffPsIq+lY8OdEb9VcQ4Osfr46Y9Llvo:YcBl9v4bM6slv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da37125bf485fab5537538b860552ab528e486499b88cfa30830d0c851f7797c
Files
-
da37125bf485fab5537538b860552ab528e486499b88cfa30830d0c851f7797c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqufvfnt Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffezakyk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE