Static task
static1
Behavioral task
behavioral1
Sample
b2d471de2dc9a4f63d933d58fe3713eea14885ea90ae47f09c7de5ddc6e0972a.exe
Resource
win10v2004-20240419-en
General
-
Target
b2d471de2dc9a4f63d933d58fe3713eea14885ea90ae47f09c7de5ddc6e0972a
-
Size
1.6MB
-
MD5
16a915533f034190d42bdd15fedacc4b
-
SHA1
7250a9f2fe5d8a00bb6c692e39e577710ed5427d
-
SHA256
b2d471de2dc9a4f63d933d58fe3713eea14885ea90ae47f09c7de5ddc6e0972a
-
SHA512
10435f6178f5e7140cb3ad46d9ea03e91af1a3fa9c49c9e1463d4e9a4b1147dd1a977bf6459746363e443f80fdfc57e2d31e601e936d76c2f7d206cf6dba6394
-
SSDEEP
49152:IAqTu+Diw7M66OoypHcpaipxTUg13Fu9y+nBlcuctv3rZp:KR9T6a0R3Fern7fclr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2d471de2dc9a4f63d933d58fe3713eea14885ea90ae47f09c7de5ddc6e0972a
Files
-
b2d471de2dc9a4f63d933d58fe3713eea14885ea90ae47f09c7de5ddc6e0972a.exe windows:10 windows x64 arch:x64
ccbb0c8784edd2580840d76401a294da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
GetTokenInformation
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapAlloc
HeapFree
ExitProcess
gdi32
GetDeviceCaps
user32
ShowWindow
msvcrt
?terminate@@YAXXZ
comctl32
ord17
cabinet
ord20
version
VerQueryValueA
Sections
.text Size: - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.m0o Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.=k8 Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.o\\ Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ