Static task
static1
Behavioral task
behavioral1
Sample
d76bed117c89ccf6f087653101fe3a069852314291ab11a7dbc1ac0c0dcd7fde.exe
Resource
win10v2004-20240412-en
General
-
Target
d76bed117c89ccf6f087653101fe3a069852314291ab11a7dbc1ac0c0dcd7fde
-
Size
2.8MB
-
MD5
cd794a254b4dbf4dc5bf5f3dba9718d8
-
SHA1
1e833110c0f7ccfa2a52229ca53f1f945069159a
-
SHA256
d76bed117c89ccf6f087653101fe3a069852314291ab11a7dbc1ac0c0dcd7fde
-
SHA512
69d569f3e90a8879be994f969b8757b8b600aef6828ed63b5d13f2d8b49679017e4a12177d265ada6c70aa05f46e1048c514dbd1030a17e18359a593a5c1035a
-
SSDEEP
49152:QAHBNWeJeS66kcV+RgeI7qznkAQ54SofoFp6VclgkKlDMejDE:jr6SdkcVAm7qk8oFpje0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d76bed117c89ccf6f087653101fe3a069852314291ab11a7dbc1ac0c0dcd7fde
Files
-
d76bed117c89ccf6f087653101fe3a069852314291ab11a7dbc1ac0c0dcd7fde.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
njwwmcoy Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vkxnkaer Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE