Static task
static1
Behavioral task
behavioral1
Sample
35c7a9ee1fab765247c16bafc0024f106cd6483a0db10ec660d79679dd634080.exe
Resource
win10v2004-20240412-en
General
-
Target
35c7a9ee1fab765247c16bafc0024f106cd6483a0db10ec660d79679dd634080
-
Size
1.8MB
-
MD5
b3ac54878aca3413e6f7a1dfc6f44190
-
SHA1
de03303082c97f04f0a3e2e2850f23562c970ac2
-
SHA256
35c7a9ee1fab765247c16bafc0024f106cd6483a0db10ec660d79679dd634080
-
SHA512
facb27534ad96328bc40362fb13bd8b14996f4f5ff13dda8d660dc6799cccde88c29ca8f1a530834fe6e097ce231e8fdb8a438b149f56ca58df4a4a91d6de0a6
-
SSDEEP
49152:Yz7SFtfahTyNflIdH0VSaup257dro2CEHLSIOObor:NTShYlaHQSab57drw4Xo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35c7a9ee1fab765247c16bafc0024f106cd6483a0db10ec660d79679dd634080
Files
-
35c7a9ee1fab765247c16bafc0024f106cd6483a0db10ec660d79679dd634080.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ugrzisla Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yvviyyoq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE