Static task
static1
Behavioral task
behavioral1
Sample
2aaf2c716c60e207ced3a2523042c72a68e080664069ad18bb28f855f1ed2ba3.exe
Resource
win10v2004-20240226-en
General
-
Target
2aaf2c716c60e207ced3a2523042c72a68e080664069ad18bb28f855f1ed2ba3
-
Size
1.8MB
-
MD5
ba3b1c0e88873cbd53f8a3a6edf9b1a5
-
SHA1
bb0720212c0f6b0cd1e55675723f92b4ab6b727e
-
SHA256
2aaf2c716c60e207ced3a2523042c72a68e080664069ad18bb28f855f1ed2ba3
-
SHA512
35dbb78a4c1f6050700ea3296666494f24a5bd96088749baae3fd5a3244344ebdd1bcd85fb8025645228926801788a5f913f7e8728c05f3e0595a98f2867646d
-
SSDEEP
49152:CnrwAcx0RoGf+L0AVwopXfVUerNc6uTe:LACaGLdeerSVTe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aaf2c716c60e207ced3a2523042c72a68e080664069ad18bb28f855f1ed2ba3
Files
-
2aaf2c716c60e207ced3a2523042c72a68e080664069ad18bb28f855f1ed2ba3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fzfczobx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xcsbjagu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE