Static task
static1
Behavioral task
behavioral1
Sample
58d8bb6a6baf3789421d136d1819bc660abe392ba9066b4fda92da232ea7f59a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
58d8bb6a6baf3789421d136d1819bc660abe392ba9066b4fda92da232ea7f59a.exe
Resource
win10-20240404-en
General
-
Target
58d8bb6a6baf3789421d136d1819bc660abe392ba9066b4fda92da232ea7f59a
-
Size
1.8MB
-
MD5
0e97c2a5a45d4210ab1dc2fa90e0fb48
-
SHA1
eabd0361eaf9325200869596be603ade72e564fb
-
SHA256
58d8bb6a6baf3789421d136d1819bc660abe392ba9066b4fda92da232ea7f59a
-
SHA512
e25f49c99f41eef73f68bbe1e9dee31e21af5294a26b9660932c2aa6a25bae4e018d4ae5fc3c87990a384e0cfc7804475604d18cb533195752b0b4777b29fdec
-
SSDEEP
49152:f/eGiQGjaOiAdMkZi/pIJnT31jbF/9FlebM5aDD:f/DGIhQiEnT31x9DebME
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 58d8bb6a6baf3789421d136d1819bc660abe392ba9066b4fda92da232ea7f59a
Files
-
58d8bb6a6baf3789421d136d1819bc660abe392ba9066b4fda92da232ea7f59a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rvxozmnm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zwbzfcbw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE