Static task
static1
Behavioral task
behavioral1
Sample
828ab729f48b189e90b8a9412db82e2bfe097bd7bcd2d0da125e8b6f2a5f6810.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
828ab729f48b189e90b8a9412db82e2bfe097bd7bcd2d0da125e8b6f2a5f6810.exe
Resource
win11-20240426-en
General
-
Target
828ab729f48b189e90b8a9412db82e2bfe097bd7bcd2d0da125e8b6f2a5f6810
-
Size
1.8MB
-
MD5
e23e5ff43f0350dfcbcef073b9ba5212
-
SHA1
da3e79f03a2eb71d44f323110bcf14c89de090f7
-
SHA256
828ab729f48b189e90b8a9412db82e2bfe097bd7bcd2d0da125e8b6f2a5f6810
-
SHA512
03c5d2c653368c6fdaa8b2a2934166232acc01bc2d02be19e94da04d4ff90e5841a61fa74cdb577383e22c5d2085273ce44518d6c91065dc0b4ddfb4be0a6789
-
SSDEEP
49152:iKf1j7/Fr52BGZcojOBnqEY8uuHvD/tmfGgphRc:iKf13FMMZcojOBntuuPD/tmfG2hRc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 828ab729f48b189e90b8a9412db82e2bfe097bd7bcd2d0da125e8b6f2a5f6810
Files
-
828ab729f48b189e90b8a9412db82e2bfe097bd7bcd2d0da125e8b6f2a5f6810.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mftotpxy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sbzjwvwt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE