Static task
static1
Behavioral task
behavioral1
Sample
b1f147ef5fbdda670b5d98188bf085838598897cb5b09d316000071995bb185f.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
b1f147ef5fbdda670b5d98188bf085838598897cb5b09d316000071995bb185f.exe
Resource
win11-20240426-en
General
-
Target
b1f147ef5fbdda670b5d98188bf085838598897cb5b09d316000071995bb185f
-
Size
1.9MB
-
MD5
0e007067234be3bc281e4e48e6429670
-
SHA1
fd5273480e0c75916ea0f80cd9a7f8140991dfff
-
SHA256
b1f147ef5fbdda670b5d98188bf085838598897cb5b09d316000071995bb185f
-
SHA512
fe93c1f3e37533a5d9f7fbecef2503e1725a239248b42c15e6cafcf9113fe93709baf7526ccba61d7313bc4d8fd8c739033085a720bc62bb10f5980edd9b8103
-
SSDEEP
49152:dlYvtgoIhBvcFOtW9l0RjqvMj4Y4c9wsdxbgUYxWax:PWtgBUC+0R2vRY4VBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1f147ef5fbdda670b5d98188bf085838598897cb5b09d316000071995bb185f
Files
-
b1f147ef5fbdda670b5d98188bf085838598897cb5b09d316000071995bb185f.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zgykuldb Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aduhhjqo Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE