Start
Static task
static1
Behavioral task
behavioral1
Sample
f2e366c839e8cdb73aa9d6a12d74983b4e926698921a725ca1ec8d8815c5c664.exe
Resource
win10v2004-20231215-en
General
-
Target
f2e366c839e8cdb73aa9d6a12d74983b4e926698921a725ca1ec8d8815c5c664
-
Size
2.2MB
-
MD5
40dab63e2d843c9bcec3b07591899288
-
SHA1
1cc2f5924a99717ce9a88f5faa7825cdb2d34dc6
-
SHA256
f2e366c839e8cdb73aa9d6a12d74983b4e926698921a725ca1ec8d8815c5c664
-
SHA512
6206b2793b123c39f51b2a46f8946a9a2c714d30d3eaf6462c9f39d2424c69e169ae7ca3b5a92a7d49edc0ab781f34d145ab2e3bd938342227c31dd00e88ce4b
-
SSDEEP
49152:Mws9NRR5MmyC8+CWzOUi5AmfVMI2z5sObLO5t7q6oOL5vLxOU3:PQNRG3WzOMBr3O5t7qg5DwU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2e366c839e8cdb73aa9d6a12d74983b4e926698921a725ca1ec8d8815c5c664
Files
-
f2e366c839e8cdb73aa9d6a12d74983b4e926698921a725ca1ec8d8815c5c664.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xmhlrolc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
awczodtv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE