Static task
static1
Behavioral task
behavioral1
Sample
cd16ce870d32bc3f20327a9fd65fcfa152c7dd2bfc8d9e868bc706a6d5841fc3.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
cd16ce870d32bc3f20327a9fd65fcfa152c7dd2bfc8d9e868bc706a6d5841fc3.exe
Resource
win11-20240419-en
General
-
Target
cd16ce870d32bc3f20327a9fd65fcfa152c7dd2bfc8d9e868bc706a6d5841fc3
-
Size
1.8MB
-
MD5
c39f38d2f576e4ddafea1fbe22e209ec
-
SHA1
aef0eb45d861cb34bcef416820e594fe923b9140
-
SHA256
cd16ce870d32bc3f20327a9fd65fcfa152c7dd2bfc8d9e868bc706a6d5841fc3
-
SHA512
518097f48ff1deb49153e37f93e42f284fa01aafcb498e79f261637e2dc8f558363759f517a4263a8b6b680b9d56a14595d25d40c206c524d4271add4e37acea
-
SSDEEP
24576:hy9IySQwLe/LHCSaigHc13PGIpSr9c2C0lpQ5FIwahjLsaKfqGRHQa5oZpYkStH5:QwLe/DlLPGAD0o5HtaKSGRwzrKuq5r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd16ce870d32bc3f20327a9fd65fcfa152c7dd2bfc8d9e868bc706a6d5841fc3
Files
-
cd16ce870d32bc3f20327a9fd65fcfa152c7dd2bfc8d9e868bc706a6d5841fc3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kckbrdyy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdzbfsva Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE