Static task
static1
Behavioral task
behavioral1
Sample
ea8b0aa11e49738dc4d76aa702471dea1da1665705e975635e63fd1ce933681a.exe
Resource
win10v2004-20240226-en
General
-
Target
ea8b0aa11e49738dc4d76aa702471dea1da1665705e975635e63fd1ce933681a
-
Size
1.8MB
-
MD5
aaf8b392cdb0fa0d2795df5129d1f3af
-
SHA1
3747955dd538f58007faee84877e596b16def200
-
SHA256
ea8b0aa11e49738dc4d76aa702471dea1da1665705e975635e63fd1ce933681a
-
SHA512
877c7ec64b369376fecea7dfc068b8d6bef8d26bb040b2d6dd1dc4b2526f3f3d77d5c7d158cc454998edc398da6142b3ef95187380c0d1f11c40b7bd4173951a
-
SSDEEP
49152:WPqo6br4Iou0P/1hcUDCUojpUmyUwY/qC7DyZV8h/uOLO:WSou4Tu031U9yUwgXYSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ea8b0aa11e49738dc4d76aa702471dea1da1665705e975635e63fd1ce933681a
Files
-
ea8b0aa11e49738dc4d76aa702471dea1da1665705e975635e63fd1ce933681a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yuswcqpd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ktwaiutv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE