Start
Static task
static1
Behavioral task
behavioral1
Sample
4a664f38d56464aebddf07d23663943834b19a09634d76e568ea6fb2c413d019.exe
Resource
win10v2004-20240319-en
General
-
Target
4a664f38d56464aebddf07d23663943834b19a09634d76e568ea6fb2c413d019
-
Size
2.2MB
-
MD5
49ea817cc1373eafafffa36ff3c6e3cf
-
SHA1
b4adba1768667783081d0b5cb4e001707198454d
-
SHA256
4a664f38d56464aebddf07d23663943834b19a09634d76e568ea6fb2c413d019
-
SHA512
e46ea34c718dc6fb7b80efd4f936f4f5cb429703e5f2da24d19c83e97a89feb81bdc9c38ce3cf37d51eaeb2b7bd0dc886fcf4ea8b20754f0a578bb4b89b61c10
-
SSDEEP
49152:/s9NRR5MmyC8ZCuaFE5+dwYdPUSyc+V4ehKC1E4Tkypl9dZFTm7c:/QNRGEf0ywvVhl9nUY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a664f38d56464aebddf07d23663943834b19a09634d76e568ea6fb2c413d019
Files
-
4a664f38d56464aebddf07d23663943834b19a09634d76e568ea6fb2c413d019.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lrccnhvx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
snwkxqje Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE