Static task
static1
Behavioral task
behavioral1
Sample
80494cc845f18a6ab3531720f90bab343c9284f4fdc6f3cd2e6f70de096e610e.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
80494cc845f18a6ab3531720f90bab343c9284f4fdc6f3cd2e6f70de096e610e.exe
Resource
win10-20240404-en
General
-
Target
80494cc845f18a6ab3531720f90bab343c9284f4fdc6f3cd2e6f70de096e610e
-
Size
2.3MB
-
MD5
46788509322d3ef2628ad11bcc07ec7e
-
SHA1
ab9e2636c28bbac64426d3abf32b4479f762930a
-
SHA256
80494cc845f18a6ab3531720f90bab343c9284f4fdc6f3cd2e6f70de096e610e
-
SHA512
079a3cc3bd005c8bcbd429f7d9e100866f5991da1eac77bc59e2cbeaaa85b5981c84919b4b53202a7ccf701ec9b289fcb9247aeea1618e5f77ee178166b2211c
-
SSDEEP
49152:5Ts9zpYo556eURBCmOMo+JcwmJcQ76mp6Eb3w:549SoqrRBCmOMNJoclmpBb3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80494cc845f18a6ab3531720f90bab343c9284f4fdc6f3cd2e6f70de096e610e
Files
-
80494cc845f18a6ab3531720f90bab343c9284f4fdc6f3cd2e6f70de096e610e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ohwvyotm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rcokeosv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE