Static task
static1
Behavioral task
behavioral1
Sample
f861b2daea71cee9e80928ea7236ea3cf8d41d35cf9d60b3a5858bb7a5468d2a.exe
Resource
win10v2004-20240419-en
General
-
Target
f861b2daea71cee9e80928ea7236ea3cf8d41d35cf9d60b3a5858bb7a5468d2a
-
Size
2.3MB
-
MD5
5e272ae13b4e56c05619f89f1643ea8b
-
SHA1
2d22e5c8a29eb255646466f184bd54fef064a20a
-
SHA256
f861b2daea71cee9e80928ea7236ea3cf8d41d35cf9d60b3a5858bb7a5468d2a
-
SHA512
784da88a0d1d316adb0c7f77bedec8a4ebf4145fdc61baae5ac71d11693c9f4c4423e208db87b55f8cbce39eae7603745618012bcacf076531aabfa807fc7f0b
-
SSDEEP
49152:wGY5918NqwTEgTcQH/GAb/iHzTSPQGVFCnrikULqr5A:BhTPfz/oi3VFCnuLqy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f861b2daea71cee9e80928ea7236ea3cf8d41d35cf9d60b3a5858bb7a5468d2a
Files
-
f861b2daea71cee9e80928ea7236ea3cf8d41d35cf9d60b3a5858bb7a5468d2a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jktpkgwe Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dwflxxwz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE