Start
Static task
static1
Behavioral task
behavioral1
Sample
b3ea9ac11a8bf717b63ad1ed59f347676f3e780495acc08a3c47706709b04d52.exe
Resource
win10v2004-20240412-en
General
-
Target
b3ea9ac11a8bf717b63ad1ed59f347676f3e780495acc08a3c47706709b04d52
-
Size
2.2MB
-
MD5
6f4f3525b5aa82ed1d8b5457d4f9bae0
-
SHA1
9305743da3b3a340536c686cbe87610e31c5d437
-
SHA256
b3ea9ac11a8bf717b63ad1ed59f347676f3e780495acc08a3c47706709b04d52
-
SHA512
1c9ad15403b25b9a8a2f0399e50ddcf7a23ef1228bf6a938692044ff4aae5c66cc4ee57b29809692b2d9a251e4b755a933cd064eac92d62f529e362c75ba016c
-
SSDEEP
49152:EeF1xn14/eiLE/H80a8s040GcmXmekcksZx0+DP+c0LUGU:t1xn1L/2TcmX//wzUGU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3ea9ac11a8bf717b63ad1ed59f347676f3e780495acc08a3c47706709b04d52
Files
-
b3ea9ac11a8bf717b63ad1ed59f347676f3e780495acc08a3c47706709b04d52.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ugwpncfv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zphowvjj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE