Static task
static1
Behavioral task
behavioral1
Sample
3f085119192257c6abf5aecfe00ad6867b874cefc1c4643aff07baf84fc8e4cc.exe
Resource
win10v2004-20240412-en
General
-
Target
3f085119192257c6abf5aecfe00ad6867b874cefc1c4643aff07baf84fc8e4cc
-
Size
1.8MB
-
MD5
5920b563340dcd3884d13ab70eb77349
-
SHA1
9e9d0d5838dc5fc5f4543a61f4ebf0e47e5b5ded
-
SHA256
3f085119192257c6abf5aecfe00ad6867b874cefc1c4643aff07baf84fc8e4cc
-
SHA512
f6a007798b513a820919a39972d7ca1a9d6497185e85b60311c98534b0247dc8daf80d75089251047b8b47dc166e87edcde30eb227cacfebb8eef997d98ad25d
-
SSDEEP
49152:z3/bn/51ne3hNMfjh/jAqrV4ZJA9weYGUG1L1X:zjnBBe3h+/jAqV4ZOeLC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f085119192257c6abf5aecfe00ad6867b874cefc1c4643aff07baf84fc8e4cc
Files
-
3f085119192257c6abf5aecfe00ad6867b874cefc1c4643aff07baf84fc8e4cc.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ljmxofzk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dndvuwtk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE