Static task
static1
Behavioral task
behavioral1
Sample
b0780680be39d30ef68681011a9f81f3279f366ed1e9dcf1d16f0fc108b8d553.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b0780680be39d30ef68681011a9f81f3279f366ed1e9dcf1d16f0fc108b8d553.exe
Resource
win10-20240404-en
General
-
Target
b0780680be39d30ef68681011a9f81f3279f366ed1e9dcf1d16f0fc108b8d553
-
Size
2.3MB
-
MD5
deacb9bdf9fe60794451a69ac75b2c19
-
SHA1
5d9012dbf0895418c4c93c13f2054b371c35916e
-
SHA256
b0780680be39d30ef68681011a9f81f3279f366ed1e9dcf1d16f0fc108b8d553
-
SHA512
67aa0df1df5c7c3c6a48df84f090052a29afd9a60ac812f7e2ad7684094f41eb645c5f0a2b360f48588b8019a8a2f5c84bc1f75899351b35e4556782f1dd885e
-
SSDEEP
24576:6Toj1LcRPqxPf8I5tv+N3+bQ1X5jxspFmKbWJLeqb7VBQBVRP7++ukQJaJup3Yhf:6u5nhf8IKN3oQyJbWJvwxPrTJupoBo5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0780680be39d30ef68681011a9f81f3279f366ed1e9dcf1d16f0fc108b8d553
Files
-
b0780680be39d30ef68681011a9f81f3279f366ed1e9dcf1d16f0fc108b8d553.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 686KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kmeysile Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lunswtav Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE