Static task
static1
Behavioral task
behavioral1
Sample
9757b9f1a519c581003246b250536c8d118d0ca5512d46e7702f8899fd806637.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
9757b9f1a519c581003246b250536c8d118d0ca5512d46e7702f8899fd806637.exe
Resource
win11-20240508-en
General
-
Target
9757b9f1a519c581003246b250536c8d118d0ca5512d46e7702f8899fd806637
-
Size
2.3MB
-
MD5
67c6941d81c16d10d1d6dd886ee965b7
-
SHA1
2cb4a573f39d389e3b79d00a8309a79c90c6a988
-
SHA256
9757b9f1a519c581003246b250536c8d118d0ca5512d46e7702f8899fd806637
-
SHA512
a06c6cfc9fe4008e4d1a1aab6980e99712b4d7b332f35c1e8a6842fd2c1f6ab782097216df37eb68ba593ed62bd349e278f3231d9fedb2a69129a0e61b18175e
-
SSDEEP
49152:7kmKhyq24kI3qebVa0RSJFPXqBGScpNl0fnRc2FuFE:7kmKEqlkAbkjJFRScDuPu0uC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9757b9f1a519c581003246b250536c8d118d0ca5512d46e7702f8899fd806637
Files
-
9757b9f1a519c581003246b250536c8d118d0ca5512d46e7702f8899fd806637.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhdofnyp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bxbhprjx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE