Static task
static1
Behavioral task
behavioral1
Sample
0aea674a0aed98d9591b1d80def90f1a1a39682812c014fa5de1dbe3efe498d1.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
0aea674a0aed98d9591b1d80def90f1a1a39682812c014fa5de1dbe3efe498d1.exe
Resource
win11-20240508-en
General
-
Target
0aea674a0aed98d9591b1d80def90f1a1a39682812c014fa5de1dbe3efe498d1
-
Size
1.8MB
-
MD5
13612b92a534f262cae89a24ea5285d2
-
SHA1
06953df475afce77e1f639a2a1199793b013f837
-
SHA256
0aea674a0aed98d9591b1d80def90f1a1a39682812c014fa5de1dbe3efe498d1
-
SHA512
fed9c6e903962e4eec08053a5100c3d4aaba6b03f3cdf0dbb6614fa69797c897293e0daec1bdc2730c048f21f5d5da9b3c2e4dcd99842b259951a8e530f7da26
-
SSDEEP
49152:sZO7D5bsi+IsUSfuNYYo6OmqgHRY9b23SjMvjeqNcQsFE:xFsi+IrKAYD2zBiqNc3E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aea674a0aed98d9591b1d80def90f1a1a39682812c014fa5de1dbe3efe498d1
Files
-
0aea674a0aed98d9591b1d80def90f1a1a39682812c014fa5de1dbe3efe498d1.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qrsbtfyc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gebsxguv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE