Static task
static1
Behavioral task
behavioral1
Sample
86113573183316c6651feb5d3739a6dbe3d4a248b26777501f33c813ddd2a397.exe
Resource
win10v2004-20240426-en
General
-
Target
86113573183316c6651feb5d3739a6dbe3d4a248b26777501f33c813ddd2a397
-
Size
1.8MB
-
MD5
83a4172891b308c57bb11745b77c6413
-
SHA1
82acdcdae8d9ed1bab00ec3e865541ebe9e1df69
-
SHA256
86113573183316c6651feb5d3739a6dbe3d4a248b26777501f33c813ddd2a397
-
SHA512
ec65de3d32edd8ea06a51d8b9630b84d03ba1a70545f432222759524a67b848d2f1d572059676d4e6a5132350eaf43123092b085b9bfca5363d3affe59ee7839
-
SSDEEP
49152:G6dnw3DgInp9oXvi6mE4nN2+dZ8Dy0H4:11w3D9DoXORNtdkxH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 86113573183316c6651feb5d3739a6dbe3d4a248b26777501f33c813ddd2a397
Files
-
86113573183316c6651feb5d3739a6dbe3d4a248b26777501f33c813ddd2a397.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ogkoqxat Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxtohaxe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE