Static task
static1
Behavioral task
behavioral1
Sample
08053adfeae7dd9c11597d685dffb87473ba9e1fbaf7c9bea32abe26cc1e1e93.exe
Resource
win10v2004-20240508-en
General
-
Target
08053adfeae7dd9c11597d685dffb87473ba9e1fbaf7c9bea32abe26cc1e1e93
-
Size
1.9MB
-
MD5
436cc491bd26f81d320e0395e5f9a28a
-
SHA1
8f9a49356176538741f3dbd364dcfb01bb5b6c26
-
SHA256
08053adfeae7dd9c11597d685dffb87473ba9e1fbaf7c9bea32abe26cc1e1e93
-
SHA512
12931e95c58d549405156013abcdbff91f722549355ab4d22030c2ff43c359b286a68993f87b2daeede954647e6bb389dd5753c0f9ac7d280922ffb496e94581
-
SSDEEP
49152:K6N0mpdffxVyS5+hFL76XxqEdZ2mjrRJLFfDY/z4N1JpVId3Z:T0mpVu6+v6BfdEmHLJ7r17md3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 08053adfeae7dd9c11597d685dffb87473ba9e1fbaf7c9bea32abe26cc1e1e93
Files
-
08053adfeae7dd9c11597d685dffb87473ba9e1fbaf7c9bea32abe26cc1e1e93.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nefamkch Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zkzohcbu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE