Static task
static1
Behavioral task
behavioral1
Sample
2fcce1aedaae725a2447bb49bf6c4c14208cfaf5345e09c716395345e6fa17d4.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
2fcce1aedaae725a2447bb49bf6c4c14208cfaf5345e09c716395345e6fa17d4.exe
Resource
win11-20240426-en
General
-
Target
2fcce1aedaae725a2447bb49bf6c4c14208cfaf5345e09c716395345e6fa17d4
-
Size
1.8MB
-
MD5
cdf5f1f97d606c25c4cb14e9b38b13de
-
SHA1
3f36c74f47fa10d51f862baeb9e1081e05f47c39
-
SHA256
2fcce1aedaae725a2447bb49bf6c4c14208cfaf5345e09c716395345e6fa17d4
-
SHA512
81c0091a3aaeb3cb5e594d2c94bed748dbfcd13d46e4c0852d1589c03050bdbb625e027c197c15e38365881b2057fee263fd9c3e9f47f33d6f050785c6667e88
-
SSDEEP
49152:wTySlm0EqaHs0YSvHKBMXab42eib88nLZvY1nB:R+j/aMyfrLDnKBYB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fcce1aedaae725a2447bb49bf6c4c14208cfaf5345e09c716395345e6fa17d4
Files
-
2fcce1aedaae725a2447bb49bf6c4c14208cfaf5345e09c716395345e6fa17d4.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qtyvzdtb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fpambilj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE