Static task
static1
Behavioral task
behavioral1
Sample
8b38543e68dd7639af2a273a4a15a9a5db11af1e200a33b468474d06c3696fa4.exe
Resource
win10v2004-20240226-en
General
-
Target
8b38543e68dd7639af2a273a4a15a9a5db11af1e200a33b468474d06c3696fa4
-
Size
1.8MB
-
MD5
c6184d3d100524aadf7eb8fd1dcb8ec3
-
SHA1
3e56e59a5695da8cec3372ab72ba553a821d3f32
-
SHA256
8b38543e68dd7639af2a273a4a15a9a5db11af1e200a33b468474d06c3696fa4
-
SHA512
5aa0098c4541bfbaf584e2a1ae77296c205d30e0cb8b5ae9d0b31241a6725f8585af8df8d22169b9c0309e23e532659382b52653bde911febf717d09db7bd5d4
-
SSDEEP
49152:8JUe16NFQgTBkDgs4bH0Nqq9tKKR5PEmhXg39Y3g:0Ue2TGDpfRKMPvh0Yw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b38543e68dd7639af2a273a4a15a9a5db11af1e200a33b468474d06c3696fa4
Files
-
8b38543e68dd7639af2a273a4a15a9a5db11af1e200a33b468474d06c3696fa4.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tnrxwlao Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sncmnxld Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE