Static task
static1
Behavioral task
behavioral1
Sample
feaadcb7b02c5d8e21edb6f87003779a7bba15ef1e70507f2f9f85c31a4c173a.exe
Resource
win10v2004-20240419-en
General
-
Target
feaadcb7b02c5d8e21edb6f87003779a7bba15ef1e70507f2f9f85c31a4c173a
-
Size
2.3MB
-
MD5
2966fbfcc89919c14b9e20e38d6b44cc
-
SHA1
94e9302244a09bbf73352e33f1150f4fb75e394a
-
SHA256
feaadcb7b02c5d8e21edb6f87003779a7bba15ef1e70507f2f9f85c31a4c173a
-
SHA512
36c8b99668692b4fd97ae32d3a2206e21d7125646d1d7a57b10f73b3ce4d515a78d9118d0de65bdb57a662f271ddc50fff4b7f1082b064bfe76000b51dc0fbd8
-
SSDEEP
49152:BGY5918NqwTEgTctdCybd4M2dcNL+wRYMaSVzwlOXbnrFlK:OhTsCk41q+w/V0s7pl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feaadcb7b02c5d8e21edb6f87003779a7bba15ef1e70507f2f9f85c31a4c173a
Files
-
feaadcb7b02c5d8e21edb6f87003779a7bba15ef1e70507f2f9f85c31a4c173a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
thddhejp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
skkndiqt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE