Static task
static1
Behavioral task
behavioral1
Sample
abe9572732c2e06ffc0346e3df5d21559a46e1a5152416a22c8765c7454dce73.exe
Resource
win10v2004-20240508-en
General
-
Target
abe9572732c2e06ffc0346e3df5d21559a46e1a5152416a22c8765c7454dce73
-
Size
2.3MB
-
MD5
e7913e8f677c408486e6ea3610eab838
-
SHA1
04749833648290db5199dee421a5d6a6519e8a9e
-
SHA256
abe9572732c2e06ffc0346e3df5d21559a46e1a5152416a22c8765c7454dce73
-
SHA512
1761118cbfa987d7ef3c1cee3e5f9061e73fa6e8194387a40117924a0574f84065672adc748bd594cc1517a2f0dee9920a3be401b4c9ab883475e0514b90acc6
-
SSDEEP
49152:6kmKhyq24kI3qebVs3JsvF/YLRqdgeAo3pQy2GWgBY6Cr8Vy5h4g:6kmKEqlkAbm30WRGL3t1NBY6Cr8V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource abe9572732c2e06ffc0346e3df5d21559a46e1a5152416a22c8765c7454dce73
Files
-
abe9572732c2e06ffc0346e3df5d21559a46e1a5152416a22c8765c7454dce73.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yaiddmdi Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nmlkidpg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE