Static task
static1
Behavioral task
behavioral1
Sample
4689092bad6b1ac29d2569679fa463268455c35fce69e6b905b0f2dda011e74c.exe
Resource
win10v2004-20240419-en
General
-
Target
4689092bad6b1ac29d2569679fa463268455c35fce69e6b905b0f2dda011e74c
-
Size
2.3MB
-
MD5
e8dcc58adb90bf7961a7d870ea702230
-
SHA1
ab6effa5eaaadaaf9c925ec4515153c5f0074888
-
SHA256
4689092bad6b1ac29d2569679fa463268455c35fce69e6b905b0f2dda011e74c
-
SHA512
87be87b9cc8cbd0020ea499882b35ebbc68cca0aa3e09e2aadd123bde0b137a7e3e4007cc03ee67d5c209659c579a8a442fdd62e4829c78232cea443ae7b2d14
-
SSDEEP
49152:FGY5918NqwTEgTcQHidYN+iNX6w/gxTVPJOnfrWBFojf6Ar+l:6hTPHi2+iNqrTVRifKajf6Am
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4689092bad6b1ac29d2569679fa463268455c35fce69e6b905b0f2dda011e74c
Files
-
4689092bad6b1ac29d2569679fa463268455c35fce69e6b905b0f2dda011e74c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhfidtrd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
phdqaknr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE