Static task
static1
Behavioral task
behavioral1
Sample
935feb92eaab291a30a7a78ea7ba699b39764c4fa4665edeaaf2f5399d5e43aa.exe
Resource
win10v2004-20240419-en
General
-
Target
935feb92eaab291a30a7a78ea7ba699b39764c4fa4665edeaaf2f5399d5e43aa
-
Size
1.9MB
-
MD5
f1cf5e8ecb837d8a71ce41e98297a6da
-
SHA1
65886fbff2c38955de9f04bc203959a2a23b9335
-
SHA256
935feb92eaab291a30a7a78ea7ba699b39764c4fa4665edeaaf2f5399d5e43aa
-
SHA512
a795bc2dc4d57bfa37debcc5c73ccd65c63462b99193bd88b0b5f93b85b1dde0ac79bd2990c5255c8e83e87e7fc382bdcd39528eeed6153385a4aea3482688af
-
SSDEEP
49152:B3/bnCp7uzGoaKkmRtx1jcn5Sc0Nq1DGnpD0TXaCvqp+R:BjnWMrk4t/Q5SgOpD07asqpu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 935feb92eaab291a30a7a78ea7ba699b39764c4fa4665edeaaf2f5399d5e43aa
Files
-
935feb92eaab291a30a7a78ea7ba699b39764c4fa4665edeaaf2f5399d5e43aa.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eklyngiz Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vqaeigrq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE