Start
Static task
static1
Behavioral task
behavioral1
Sample
9803e7ab1c9583cc56e39ab7c5cda5130cd9a25f244513f57362a011075005d7.exe
Resource
win10v2004-20240412-en
General
-
Target
9803e7ab1c9583cc56e39ab7c5cda5130cd9a25f244513f57362a011075005d7
-
Size
2.2MB
-
MD5
e4400749403d0bcd8da2458b8979d6da
-
SHA1
42be6d996591daffd174252c61c101c5ba1bf3ef
-
SHA256
9803e7ab1c9583cc56e39ab7c5cda5130cd9a25f244513f57362a011075005d7
-
SHA512
10df81ec3c8deb5560613e1279d1321456f116db95adeba3aa88b4027602f6eef3584fd2397a39c83e01e748cd12098faa54e95f072bf959a8b58702576e00b3
-
SSDEEP
49152:4eF1xn14/1OkDQeAdpJJ3HBVKYdBmbCQkHCJlU:p1xn1s1D6Z3HbKi2dkOlU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9803e7ab1c9583cc56e39ab7c5cda5130cd9a25f244513f57362a011075005d7
Files
-
9803e7ab1c9583cc56e39ab7c5cda5130cd9a25f244513f57362a011075005d7.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gclzzbnp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xzcuyrmo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE