Static task
static1
Behavioral task
behavioral1
Sample
fe8b4467229726730a60484f05f1d2c05d86dbdb1ae0035942ab2851851fd859.exe
Resource
win10v2004-20240426-en
General
-
Target
fe8b4467229726730a60484f05f1d2c05d86dbdb1ae0035942ab2851851fd859
-
Size
2.3MB
-
MD5
fc3e1ed992eacd1897f625d6de2412ab
-
SHA1
29987336706bff0c999f5ae4183dbfab6943fb9a
-
SHA256
fe8b4467229726730a60484f05f1d2c05d86dbdb1ae0035942ab2851851fd859
-
SHA512
354197d83b2961905adde24f37bb5d4f4400b08359900b82228a004aefd9fdbee0c5dec6330c36c93ceec3c2c3b62419bbc7e36b08dc82b593a3120fce74478e
-
SSDEEP
49152:0GY5918NqwTEgTcQvEekec4I8WAZtVrP0GzyVRiz5580rlko9Wu+H0u:dhTPzc4GAZXoGzyV05580xbWN0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe8b4467229726730a60484f05f1d2c05d86dbdb1ae0035942ab2851851fd859
Files
-
fe8b4467229726730a60484f05f1d2c05d86dbdb1ae0035942ab2851851fd859.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jfahjznp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tyucxoks Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE