Static task
static1
Behavioral task
behavioral1
Sample
3d573ff7bb367656cb40f5d0f79889094325599ceda6f5d4dd9515354312b6a1.exe
Resource
win10v2004-20240419-en
General
-
Target
3d573ff7bb367656cb40f5d0f79889094325599ceda6f5d4dd9515354312b6a1
-
Size
1.8MB
-
MD5
214f5fb05d3c54a38e6342a4247f0ed6
-
SHA1
89581a42dd086b43b56a1a871c5d8a6ba8e53d3c
-
SHA256
3d573ff7bb367656cb40f5d0f79889094325599ceda6f5d4dd9515354312b6a1
-
SHA512
45656b0cc121b64d3e421c23cb7334353ea27ad73e78b5ad9ee874d8459957b3143c62666b93c4e9acfe590ea1b8ba7c58237a7873ace3e402d197aefd48b9e7
-
SSDEEP
49152:mAo5b1TlcwRzLqakVibbaNA1HU8a6u8r1YGUMg1qxH4J:mASlciLqakVsbljk8riGU0xYJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d573ff7bb367656cb40f5d0f79889094325599ceda6f5d4dd9515354312b6a1
Files
-
3d573ff7bb367656cb40f5d0f79889094325599ceda6f5d4dd9515354312b6a1.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdwmllcy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nyaaayqh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE