Static task
static1
Behavioral task
behavioral1
Sample
1397b98651036c286683f4e5a56d2ff408bf3c17b60db6145f45d312d5571e0f.exe
Resource
win10v2004-20240226-en
General
-
Target
1397b98651036c286683f4e5a56d2ff408bf3c17b60db6145f45d312d5571e0f
-
Size
2.3MB
-
MD5
a11486bf080086fcbc1207701db4813a
-
SHA1
03e06f309a36a2ef82f6dbcd2b531cf04d9bc647
-
SHA256
1397b98651036c286683f4e5a56d2ff408bf3c17b60db6145f45d312d5571e0f
-
SHA512
71e313561219f4446dcf29999e5b9affbe574e6c3c95427263b9e210a1ba1a571dcfaab48e77b8bc54e865708140700316f6ebd2b29c13d7d111469869bd24e9
-
SSDEEP
49152:2g69SebPPiKgYyufHIegovGROo5GvaUcXCvU4lm0voxKDaJ7e:2g69SebiofHQouROo5GvRwgPxaJ7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1397b98651036c286683f4e5a56d2ff408bf3c17b60db6145f45d312d5571e0f
Files
-
1397b98651036c286683f4e5a56d2ff408bf3c17b60db6145f45d312d5571e0f.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
olpswvuk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yfonczve Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE