Start
Static task
static1
Behavioral task
behavioral1
Sample
d72c1508b7dec1998c6041a1ed2c055320b1f373b99c7a916d84118e2426581f.exe
Resource
win10v2004-20240226-en
General
-
Target
d72c1508b7dec1998c6041a1ed2c055320b1f373b99c7a916d84118e2426581f
-
Size
2.2MB
-
MD5
9ec7c0c6a13429bbc57dc6c96f45fc99
-
SHA1
44c06124f8462dac77b111e2474267e7f0167702
-
SHA256
d72c1508b7dec1998c6041a1ed2c055320b1f373b99c7a916d84118e2426581f
-
SHA512
0a1806580f508ce612e0fa1a200dac34ff4fe01678ed79fe32798a4b4220c11b967e0759018a2e291ca078e3cf1758419f613108652e63ddcc9b23b139ea6f0f
-
SSDEEP
49152:Js9NRR5MmyC8+CgGuAno6xwkhHAxJbQ3cb4P/6ITK7ef4:JQNRG3gGDgTQMn0K7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d72c1508b7dec1998c6041a1ed2c055320b1f373b99c7a916d84118e2426581f
Files
-
d72c1508b7dec1998c6041a1ed2c055320b1f373b99c7a916d84118e2426581f.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdnbcfbe Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kdtwzjan Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE