Static task
static1
Behavioral task
behavioral1
Sample
064b3e46f665ee889f70ebcf75b1e1db215867fcd6bfe8744d1fb482374813ae.exe
Resource
win10v2004-20240419-en
General
-
Target
064b3e46f665ee889f70ebcf75b1e1db215867fcd6bfe8744d1fb482374813ae
-
Size
1.8MB
-
MD5
09d3c7e24e529ccd1150fa9bda7bb93a
-
SHA1
c2816fa98b7057008659dd26e30f629ffcd25789
-
SHA256
064b3e46f665ee889f70ebcf75b1e1db215867fcd6bfe8744d1fb482374813ae
-
SHA512
8cbd003ddf461966d6e9c292ffd0600a32964930be7caa5811af23e9d17815e1eddabd3dfe593363e8a5d58f47f81a63614b9d2b24a64e3c05beec1b888a8543
-
SSDEEP
49152:5jJ0ibYvCbEjdnOxO1wDjgnt7H/iGEMSuXY4u5:5jGebw0xOyDsmMS9B5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 064b3e46f665ee889f70ebcf75b1e1db215867fcd6bfe8744d1fb482374813ae
Files
-
064b3e46f665ee889f70ebcf75b1e1db215867fcd6bfe8744d1fb482374813ae.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cgxymczp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wqgxccme Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE