Static task
static1
Behavioral task
behavioral1
Sample
31ad12272ed39dd2850f48bf8bb346daefc9aa042cdc583024ed0eb6249c7da7.exe
Resource
win10v2004-20240226-en
General
-
Target
31ad12272ed39dd2850f48bf8bb346daefc9aa042cdc583024ed0eb6249c7da7
-
Size
2.3MB
-
MD5
32d057fe297eb574e8e318b167f0a390
-
SHA1
7be94b729e6cd8d161d0ab22b12e909af2213e20
-
SHA256
31ad12272ed39dd2850f48bf8bb346daefc9aa042cdc583024ed0eb6249c7da7
-
SHA512
d51dce1d5d6fa751524a84061a7976c44ba6e2c3b28b6d954968cc9417cc55f33c5a631370fd565a9e6f6308163873ac6e8122de1b315f93c37948dd090af591
-
SSDEEP
49152:ng69SebPPiKgYyNQ7k5wft6KsDHkA41W7Tj40kfo7jlfa:ng69Sebi7igDEA4g7Tj3kg7jV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31ad12272ed39dd2850f48bf8bb346daefc9aa042cdc583024ed0eb6249c7da7
Files
-
31ad12272ed39dd2850f48bf8bb346daefc9aa042cdc583024ed0eb6249c7da7.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tvjdhzmu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cefrwcoa Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE