Static task
static1
Behavioral task
behavioral1
Sample
1747e1b8af2514c4efb5df358b9b2920b10414e194ad69b94d4d56760e252cd0.exe
Resource
win10v2004-20240412-en
General
-
Target
1747e1b8af2514c4efb5df358b9b2920b10414e194ad69b94d4d56760e252cd0
-
Size
2.3MB
-
MD5
bd9b0e5ea00b35e7e6750c4cac1657a4
-
SHA1
bd22da08ad5100b0b21e86a5ffc5fc182b69ac65
-
SHA256
1747e1b8af2514c4efb5df358b9b2920b10414e194ad69b94d4d56760e252cd0
-
SHA512
3621914ff1280146e6af3f827a38d0c9b2cc4c97b3cec32ac2b6235e64982675c6401d941ba5c20526b9dfaf11f52cfd2c5dee0ceb02c8cdeb3257ac4435551b
-
SSDEEP
49152:jg69SebPPiKgYyE5cbv4RimlKlOIhzJTGER5D+Wqlm:jg69SebiO5G4RTyD16EX1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1747e1b8af2514c4efb5df358b9b2920b10414e194ad69b94d4d56760e252cd0
Files
-
1747e1b8af2514c4efb5df358b9b2920b10414e194ad69b94d4d56760e252cd0.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vyyexotr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
urnxciko Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE