Static task
static1
Behavioral task
behavioral1
Sample
c35ba7a20427763709f3f8b0c24f2056358035825ba26c28801aca6086e09bea.exe
Resource
win10v2004-20240226-en
General
-
Target
c35ba7a20427763709f3f8b0c24f2056358035825ba26c28801aca6086e09bea
-
Size
1.8MB
-
MD5
88f8cbaab680597b4fccaf15f2fa96da
-
SHA1
9026d07b89173c64f0fd4a7a53f44b8f16c32988
-
SHA256
c35ba7a20427763709f3f8b0c24f2056358035825ba26c28801aca6086e09bea
-
SHA512
d33ed76e42f2a03bd36790a444c4a462ca68682f21f1c4d0eeb03bef6cdb6e4856fe9ba47c8175afbe090c22f9ba9f39169c4dbc182d23acb2831f3a24fc975c
-
SSDEEP
49152:lJDKLQWywlo2LMgV5EYzUiwAZaDNPDI8jgMfR:l2QW62LMWEFCYN0AgMfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c35ba7a20427763709f3f8b0c24f2056358035825ba26c28801aca6086e09bea
Files
-
c35ba7a20427763709f3f8b0c24f2056358035825ba26c28801aca6086e09bea.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qkogcntk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uciibwov Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE