Static task
static1
Behavioral task
behavioral1
Sample
a7e09cf8ee27afe3891d45e468a8ceb61cc554592d34274ccb6834929a4e59de.exe
Resource
win10v2004-20240426-en
General
-
Target
a7e09cf8ee27afe3891d45e468a8ceb61cc554592d34274ccb6834929a4e59de
-
Size
1.8MB
-
MD5
e4b22daea685226c4c5d0014ebc25ccd
-
SHA1
f1d95f1850ec92711251008ad5233f933c8c3617
-
SHA256
a7e09cf8ee27afe3891d45e468a8ceb61cc554592d34274ccb6834929a4e59de
-
SHA512
8791c135a71f7a55a45280af82c11e5b805431d30e1e1660de402bcfe8f3c484e0c97b9df2710d6c6965e4bef2e0a4576414553a193a958193a1ec97a7b40e02
-
SSDEEP
49152:7F+f5zu4ZxDif7xL4x6CwlqY7JjWz1BJJzDsc/:7F+JuU+lqYCMc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7e09cf8ee27afe3891d45e468a8ceb61cc554592d34274ccb6834929a4e59de
Files
-
a7e09cf8ee27afe3891d45e468a8ceb61cc554592d34274ccb6834929a4e59de.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wzaghcxe Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jfuafxfe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE