Static task
static1
Behavioral task
behavioral1
Sample
74e4f20e127f4c8219df419238a76ea45089f4c17c7b5d29128a1269978e5e33.exe
Resource
win10v2004-20240412-en
General
-
Target
74e4f20e127f4c8219df419238a76ea45089f4c17c7b5d29128a1269978e5e33
-
Size
1.9MB
-
MD5
7d79a3da2d6473ba0ea8a7e7449107ba
-
SHA1
ffa0c558fd4ebd44aaa9942336703975baa91ea4
-
SHA256
74e4f20e127f4c8219df419238a76ea45089f4c17c7b5d29128a1269978e5e33
-
SHA512
2b20aa6dbc19e687dc8c448e7ae9d9ce72e1f2c131a7df29eefe2e3381352d07db580a71aa784c3dd35fd32b6d4c0e371e564e0cfa8840b8c2d2619f9f6bc31d
-
SSDEEP
49152:9qemjxgDDGCVawZAYYJlI57F02fqQvRsun:9KIGwZAYYAbzsK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 74e4f20e127f4c8219df419238a76ea45089f4c17c7b5d29128a1269978e5e33
Files
-
74e4f20e127f4c8219df419238a76ea45089f4c17c7b5d29128a1269978e5e33.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hpcwmnbe Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fsykzoyd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE