Static task
static1
Behavioral task
behavioral1
Sample
a2632820f3bdfb997f571d67bdcc68b8e9932b65c13c33eb37cf246bc136f1fd.exe
Resource
win10v2004-20240412-en
General
-
Target
a2632820f3bdfb997f571d67bdcc68b8e9932b65c13c33eb37cf246bc136f1fd
-
Size
1.8MB
-
MD5
979390539f82d07177bb7603a3e98950
-
SHA1
6d277bba7468125cc20ba81d1e2029eeca9ef043
-
SHA256
a2632820f3bdfb997f571d67bdcc68b8e9932b65c13c33eb37cf246bc136f1fd
-
SHA512
413a96b281f7e531bf6c8087eecab44ba6c523c1981e59b6a385379e379692adc420211d131930c989352868860f0d98bff009d061cbcd80629b61a9b481678e
-
SSDEEP
49152:6KslLl4QEDdklu+D64b47/vIR+I0wRXJOqDV+J/:vILllEa64E7K+LwRXQm0p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2632820f3bdfb997f571d67bdcc68b8e9932b65c13c33eb37cf246bc136f1fd
Files
-
a2632820f3bdfb997f571d67bdcc68b8e9932b65c13c33eb37cf246bc136f1fd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zpyqauxy Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tnajlixj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE