Static task
static1
Behavioral task
behavioral1
Sample
8eef3dbfa5c2d412539f726856832676faba89e798881ed498c20026d3799f95.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
8eef3dbfa5c2d412539f726856832676faba89e798881ed498c20026d3799f95.exe
Resource
win11-20240412-en
General
-
Target
8eef3dbfa5c2d412539f726856832676faba89e798881ed498c20026d3799f95
-
Size
2.3MB
-
MD5
d78638638e15afd8837b40586a025571
-
SHA1
6e2be3219246e4c0a8f9707ca5efee2604edd444
-
SHA256
8eef3dbfa5c2d412539f726856832676faba89e798881ed498c20026d3799f95
-
SHA512
33097543f4c9fe193c067cac7906b400fcf3e62fb06520bcf42aa760d6a7befc889225ee8263f822c49bcb5ac059d5fbcfd10c1278d67740394934abb1aea5f8
-
SSDEEP
49152:Hg69SebPPiKgYyV8jGCegwd8VGz+ymnDD0cZcnTw/C3NzUgq:Hg69SebiL8jneT+ycRZYokNQgq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eef3dbfa5c2d412539f726856832676faba89e798881ed498c20026d3799f95
Files
-
8eef3dbfa5c2d412539f726856832676faba89e798881ed498c20026d3799f95.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nksutzbc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vkpqxvpc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE