Static task
static1
Behavioral task
behavioral1
Sample
ad5bc10a37445f70d696ea6c02bd6faf0ee900b50f8efca5f56664d90c73fe87.exe
Resource
win10v2004-20240412-en
General
-
Target
ad5bc10a37445f70d696ea6c02bd6faf0ee900b50f8efca5f56664d90c73fe87
-
Size
1.8MB
-
MD5
3398b04eb8dbb7ef83640d4fac20f266
-
SHA1
0da738182848763631044c26e74cf315d96e2c6a
-
SHA256
ad5bc10a37445f70d696ea6c02bd6faf0ee900b50f8efca5f56664d90c73fe87
-
SHA512
c0f3477a5b6d5eaef7043931cf9ac4e435922ddf1280f541d79d6d29587c9a1c1f5cc0f5f745131dfc6aad1967f9c0052d3d9135f73bae883c0c20c11451a3b5
-
SSDEEP
49152:yNEk6rn4RpnLwLsbbUq5ypvFZSJYHzfkN6beuJM:Cyn4fbbUq5OnCUzfbI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ad5bc10a37445f70d696ea6c02bd6faf0ee900b50f8efca5f56664d90c73fe87
Files
-
ad5bc10a37445f70d696ea6c02bd6faf0ee900b50f8efca5f56664d90c73fe87.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkldvbme Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
emxwbgxt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE