Start
Static task
static1
Behavioral task
behavioral1
Sample
0dcf9bf5463f68d1060b3e043c4c2e7c738173bcd06c2376ff7a2dc7a9973f58.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0dcf9bf5463f68d1060b3e043c4c2e7c738173bcd06c2376ff7a2dc7a9973f58.exe
Resource
win10-20240404-en
General
-
Target
0dcf9bf5463f68d1060b3e043c4c2e7c738173bcd06c2376ff7a2dc7a9973f58
-
Size
2.1MB
-
MD5
0fa21416c6bfbc704e79aaea5c1c89e0
-
SHA1
bc8c545851b1485e2c69bf19a7b04efb4a8ea56e
-
SHA256
0dcf9bf5463f68d1060b3e043c4c2e7c738173bcd06c2376ff7a2dc7a9973f58
-
SHA512
efff2e8949b7f1c74b3cfc241702c28da8ccd55c205c1f4c977b5956fae844a4088ac261154eb097e3dff81dd3c3d3383a46c44cfea5704eedb91a600b759ae7
-
SSDEEP
49152:WSUl6vD5DxN6HHLJ5Jj2j7lkmrSlk7dAgwjfgg5:WSSwD5DxkzJG7Wmem7oTgg5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dcf9bf5463f68d1060b3e043c4c2e7c738173bcd06c2376ff7a2dc7a9973f58
Files
-
0dcf9bf5463f68d1060b3e043c4c2e7c738173bcd06c2376ff7a2dc7a9973f58.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gbyefwxg Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ufqxzrur Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE