Static task
static1
Behavioral task
behavioral1
Sample
f0bdb5d3910d430fd75465bfc544aae18e1f69417ae9f20b9aeb84fd934a1eb9.exe
Resource
win10v2004-20240508-en
General
-
Target
f0bdb5d3910d430fd75465bfc544aae18e1f69417ae9f20b9aeb84fd934a1eb9
-
Size
1.8MB
-
MD5
bc49d08991cc4423a58c8775d4f9b05b
-
SHA1
8550df406e70f674a51dfbdc5ec52ec2a18acb38
-
SHA256
f0bdb5d3910d430fd75465bfc544aae18e1f69417ae9f20b9aeb84fd934a1eb9
-
SHA512
8e20ef2a3684cca4a91321421951915d6fb40752e043f5012f5a3ea4e9d16f6b11c9840e0c8c9c46265d8732eb03fa16ce31d7e14dd26bd3b39b1e731e83c8f1
-
SSDEEP
49152:51A2RkzQlZqW0zB1kSVHv9rBhRj8x0ZI1v1ImPJ5KwYTezPU:nSzyZZ08kFrZjXI1v1/5h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0bdb5d3910d430fd75465bfc544aae18e1f69417ae9f20b9aeb84fd934a1eb9
Files
-
f0bdb5d3910d430fd75465bfc544aae18e1f69417ae9f20b9aeb84fd934a1eb9.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qbgjylpd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
phkeivsx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE