Static task
static1
Behavioral task
behavioral1
Sample
fb916f56f8610e2cb4b962141fa3bcf09975bed780b889948dc27270ded41613.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral2
Sample
fb916f56f8610e2cb4b962141fa3bcf09975bed780b889948dc27270ded41613.exe
Resource
win11-20240419-en
General
-
Target
fb916f56f8610e2cb4b962141fa3bcf09975bed780b889948dc27270ded41613
-
Size
2.3MB
-
MD5
b01d7f06e2f7e336f12494ae8344f00f
-
SHA1
8a38b4ed1483dbad020d5964a272472eb9c83d1b
-
SHA256
fb916f56f8610e2cb4b962141fa3bcf09975bed780b889948dc27270ded41613
-
SHA512
b84c8465e2fd14ccb4c7a9c48a9b50b0d88a6b06400e87e0726ac68dbbbad26b285bcb1cafc66b1bbf309b26d801740133d35cd7c0079991f931430a6c5a26ee
-
SSDEEP
49152:Vg69SebPPiKgYyDvXF9bShsUGJFp3ERQ1/3dZVL5ndzSp+:Vg69SebidvXfbw4FNdZVL5dr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource fb916f56f8610e2cb4b962141fa3bcf09975bed780b889948dc27270ded41613
Files
-
fb916f56f8610e2cb4b962141fa3bcf09975bed780b889948dc27270ded41613.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cjbbddwh Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
brggqiye Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE