Static task
static1
Behavioral task
behavioral1
Sample
4feb096d2cdbea37f31ca07efe882debec9092e7e59dd5a4027b14833a10266d.exe
Resource
win10v2004-20240226-en
General
-
Target
4feb096d2cdbea37f31ca07efe882debec9092e7e59dd5a4027b14833a10266d
-
Size
1.8MB
-
MD5
94cfc2594bbcb1084bc9b9cc838061bb
-
SHA1
b0df81d2c7c6b7a0a00d5095f6499421863d3eb2
-
SHA256
4feb096d2cdbea37f31ca07efe882debec9092e7e59dd5a4027b14833a10266d
-
SHA512
b7a452a055627fadfcb7e6bec15b763e1d855f40ae4ddb58c379f78bef4aa2a9406df4033607ba01aa2ad30259624b2a783b9acd3905ed49aaeccc3855e2566d
-
SSDEEP
49152:zbZqOe8LD0yEemDmiuqmmzXnuLdU5sk0sgyzRwC:zVhyDmHq9uIAsr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4feb096d2cdbea37f31ca07efe882debec9092e7e59dd5a4027b14833a10266d
Files
-
4feb096d2cdbea37f31ca07efe882debec9092e7e59dd5a4027b14833a10266d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xglimzut Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jvzhygzn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE