Static task
static1
Behavioral task
behavioral1
Sample
9b77df8b41e572d06b6da085172de31df0100c4e78324e2669367d9240b8f1d6.exe
Resource
win10v2004-20240419-en
General
-
Target
9b77df8b41e572d06b6da085172de31df0100c4e78324e2669367d9240b8f1d6
-
Size
2.3MB
-
MD5
c43e0ce9e7f19dcad530c55ef9e6bf94
-
SHA1
c6d0771e3f0737a5c20e9c2de28eb415ff598fdc
-
SHA256
9b77df8b41e572d06b6da085172de31df0100c4e78324e2669367d9240b8f1d6
-
SHA512
e175d865c721b65597881bbeee568efd02715cd97126036d2eb98b70ac28515dee2b5d18f5d19d1a1975a2b33acc4c441a393ad041c6ede48cbda1920510eb24
-
SSDEEP
49152:Lg69SebPPiKgYyX+LOHZ8a+MP/LaiCyzBE4V1U3ALV/bQQdyv6:Lg69Sebip+Li8a4ijzBEu1mAlbQU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b77df8b41e572d06b6da085172de31df0100c4e78324e2669367d9240b8f1d6
Files
-
9b77df8b41e572d06b6da085172de31df0100c4e78324e2669367d9240b8f1d6.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ampmrrsf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vaprytao Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE