Static task
static1
Behavioral task
behavioral1
Sample
0cf36260363e2a26cfeae4673826a2e6d731ce6c8b228484deff2e3ea79c6721.exe
Resource
win10v2004-20240426-en
General
-
Target
0cf36260363e2a26cfeae4673826a2e6d731ce6c8b228484deff2e3ea79c6721
-
Size
2.3MB
-
MD5
20f64f18726dcc45999aa51e0118c1b5
-
SHA1
6880897bb4e497240067b80ccab65cc3e14cb77d
-
SHA256
0cf36260363e2a26cfeae4673826a2e6d731ce6c8b228484deff2e3ea79c6721
-
SHA512
775fccc747e78fa5c1bf3ad21009a9366aef5fc06a0b2d1d441fca0b47f46bf20b7a8282bbca3c8d8b1dbdf9deaea5655412eff738e91920732003e5ab3ccad7
-
SSDEEP
49152:STs9zpYo556eURBCxsbNyagpSGpx7JlfEWibrziQXpYMS:S49SoqrRBCxkdHGpRXMWibrziQqM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cf36260363e2a26cfeae4673826a2e6d731ce6c8b228484deff2e3ea79c6721
Files
-
0cf36260363e2a26cfeae4673826a2e6d731ce6c8b228484deff2e3ea79c6721.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avanhdlp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhmsgjzx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE