Static task
static1
Behavioral task
behavioral1
Sample
24ac69a96120bdc14e73860bd9f91373922e55b9a8ab682dc3fe746bba079f8e.exe
Resource
win10v2004-20240426-en
General
-
Target
24ac69a96120bdc14e73860bd9f91373922e55b9a8ab682dc3fe746bba079f8e
-
Size
1.8MB
-
MD5
1d9aa481b2695ee3c1e081118c91b9b7
-
SHA1
1439243f077c6a87c36e99ba7c9fa1c94fa5bd90
-
SHA256
24ac69a96120bdc14e73860bd9f91373922e55b9a8ab682dc3fe746bba079f8e
-
SHA512
16430edc80660f9648d1d5dfaaf47fc4f0730fd1886e43cd3b2563414b7320eb1578bcd791547d2296ba7eb46dec820ef3ed1e21957f9bbc4921ffa7cba9125a
-
SSDEEP
49152:8WWHT2aWtEtl9ekwMTJJBk0HAMEAxXdNpm5d:rerGG9EM9Ji0H1xQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24ac69a96120bdc14e73860bd9f91373922e55b9a8ab682dc3fe746bba079f8e
Files
-
24ac69a96120bdc14e73860bd9f91373922e55b9a8ab682dc3fe746bba079f8e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
btboirep Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ricyasaz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE