Static task
static1
Behavioral task
behavioral1
Sample
b1952cee37b78af47adccfed9f7a1835d8600c71c653ff923e32278b3773541a.exe
Resource
win10v2004-20240412-en
General
-
Target
b1952cee37b78af47adccfed9f7a1835d8600c71c653ff923e32278b3773541a
-
Size
2.3MB
-
MD5
a99a052bcad0fb63d53dd8b4e6642dd4
-
SHA1
0e121027d28f03f6d296ee10a2c047a809e34ecc
-
SHA256
b1952cee37b78af47adccfed9f7a1835d8600c71c653ff923e32278b3773541a
-
SHA512
d42a77868103952f6bb04c2df6333730a29ce5289753080cddc6f59b30f73a4d81ce3dd7130d9b3a4ec27ed32b26f4ae852828a4093246e5b0dcdf9b97dd029c
-
SSDEEP
49152:lg69SebPPiKgYywFqKQpUiep5VIPgM5MaPrhWisj4PRjIO:lg69Sebi/fUVp5+4azhJ64PRv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1952cee37b78af47adccfed9f7a1835d8600c71c653ff923e32278b3773541a
Files
-
b1952cee37b78af47adccfed9f7a1835d8600c71c653ff923e32278b3773541a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zyxlvfpd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dibhvunr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE