Static task
static1
Behavioral task
behavioral1
Sample
95f8b317aee2f56a05d862d371487f4b132b2e0637a2b515bfac3c9748db86c8.exe
Resource
win10v2004-20240412-en
General
-
Target
95f8b317aee2f56a05d862d371487f4b132b2e0637a2b515bfac3c9748db86c8
-
Size
1.8MB
-
MD5
7fe1054d61c6e61f16cf54a0d6db9c30
-
SHA1
cf1bc83ca40f639723603b0129abd4440f7c2e39
-
SHA256
95f8b317aee2f56a05d862d371487f4b132b2e0637a2b515bfac3c9748db86c8
-
SHA512
8f0d7359329cca98eaeb40c67b9827a38b23c3f295ff1ab9ca7f4df1e23f1d005efca696fcb4ec276109c7f4b55a14287beec452f0193afc1e29cc75c92eb315
-
SSDEEP
24576:6luhfp4JqYN/fhyn7tfJMdtcm8YSajZBgOew45sFdMYDelguN6bb57z:6lu0JqUQnVJuD8XcBH0sFdMYS87
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95f8b317aee2f56a05d862d371487f4b132b2e0637a2b515bfac3c9748db86c8
Files
-
95f8b317aee2f56a05d862d371487f4b132b2e0637a2b515bfac3c9748db86c8.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
atzzwzvs Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ofqrzrwn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE