Static task
static1
Behavioral task
behavioral1
Sample
edf5ef1c7d50b818903f332125b45292fabe0ce50e96265de02aaddedc464417.exe
Resource
win10v2004-20240508-en
General
-
Target
edf5ef1c7d50b818903f332125b45292fabe0ce50e96265de02aaddedc464417
-
Size
2.4MB
-
MD5
bab7148b2f322258d7b3fc0030b953bb
-
SHA1
e92aaf52d7a59e19696070906fe3619c165aa923
-
SHA256
edf5ef1c7d50b818903f332125b45292fabe0ce50e96265de02aaddedc464417
-
SHA512
0846c903725da9b0635a6febb4595efa639aa540186917fd04e1b12306eda0b0f4c46c98a976ffad7a02accdcdf5e8e715b5ac215a58546a309e00a836450c12
-
SSDEEP
49152:qAO7cD3aRZ4cRJajX8G69vtCPI2uaIoMP+RIuPpMGLA:qfcS41j8G69vg1uaInYP6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edf5ef1c7d50b818903f332125b45292fabe0ce50e96265de02aaddedc464417
Files
-
edf5ef1c7d50b818903f332125b45292fabe0ce50e96265de02aaddedc464417.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ivesniah Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wngynveq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE