Static task
static1
Behavioral task
behavioral1
Sample
ff66595fc6293a87cedd5a5946c4e10e81b6fac3556c0744ea9827ebfec118fd.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
ff66595fc6293a87cedd5a5946c4e10e81b6fac3556c0744ea9827ebfec118fd.exe
Resource
win11-20240426-en
General
-
Target
ff66595fc6293a87cedd5a5946c4e10e81b6fac3556c0744ea9827ebfec118fd
-
Size
1.8MB
-
MD5
ec8e19044879a1fa4cd9600b153ce56e
-
SHA1
8afb62904e0994cca0e368fb0c106a138a25243d
-
SHA256
ff66595fc6293a87cedd5a5946c4e10e81b6fac3556c0744ea9827ebfec118fd
-
SHA512
66704b6656d1914406104abdf10dd9207156f8c025dd535f4c63ba9163372cf9a282d593d23ca5cc64f989c60f05f8f11a2da3cdb634e5446b02da63db5f8e86
-
SSDEEP
24576:SQg/bne6RPpDAgEO+o6jgp5PCse+jS9gaXfg8TCiDyro0GC0rIwz8/3NYIWiJBbp:S3/bnfphAw/e0S9gTcB01/dLdDyw/b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff66595fc6293a87cedd5a5946c4e10e81b6fac3556c0744ea9827ebfec118fd
Files
-
ff66595fc6293a87cedd5a5946c4e10e81b6fac3556c0744ea9827ebfec118fd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jjrmvyza Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zazmvvfi Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE