Static task
static1
Behavioral task
behavioral1
Sample
ede79bebe65d6062cbd18caaeb43642d50b2eb9e1e454fb254b0531ccbc6d6d3.exe
Resource
win10v2004-20240419-en
General
-
Target
ede79bebe65d6062cbd18caaeb43642d50b2eb9e1e454fb254b0531ccbc6d6d3
-
Size
2.3MB
-
MD5
3d6659f330af2ed37302bf2205722da2
-
SHA1
5769b50675db76001aa4bbe49e401d56f3809314
-
SHA256
ede79bebe65d6062cbd18caaeb43642d50b2eb9e1e454fb254b0531ccbc6d6d3
-
SHA512
07477e49c8f0ab5e4bb1a02cf553aa45cb79e1b5b3f92bfebe12f393c2fc6cdac5a9bbab5b674e1c1affd5404c573c524ab51c17d1c49d00b596728c53da4b76
-
SSDEEP
49152:UGY5918NqwTEgTc5hkFutqm48aIvMQUDZr8lXEeBWoTGx33t2ZJF:9hT66ItqiaIvv8yXEEWoTG9E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ede79bebe65d6062cbd18caaeb43642d50b2eb9e1e454fb254b0531ccbc6d6d3
Files
-
ede79bebe65d6062cbd18caaeb43642d50b2eb9e1e454fb254b0531ccbc6d6d3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fgyvapjv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jmwmvgxf Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE