Static task
static1
Behavioral task
behavioral1
Sample
d2750dcc86be9afaadf794f077eb3037a2dda013d44bce85c72da287b3be66e5.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
d2750dcc86be9afaadf794f077eb3037a2dda013d44bce85c72da287b3be66e5.exe
Resource
win11-20240426-en
General
-
Target
d2750dcc86be9afaadf794f077eb3037a2dda013d44bce85c72da287b3be66e5
-
Size
1.8MB
-
MD5
ead6e9b45252467827e014472eca57bd
-
SHA1
cc009cf558eac684387472e370c755169d8b0025
-
SHA256
d2750dcc86be9afaadf794f077eb3037a2dda013d44bce85c72da287b3be66e5
-
SHA512
73f5acb70dc5b3e61881be59b46b9a6d70648be207e27521e8fe56ddbca1fbc72a1cb71441a2e64d36346ae510b48357d93d07b265791e2818f4228067d7fb38
-
SSDEEP
24576:W/VbEcPGG6nXCNBIMrqfUaQFNx/QT1oznsSTZG+xN69vuEtd0SLg/T2mjOhmQUKC:spPGlAifUaijoT2BTxN+0SEkmyUoo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d2750dcc86be9afaadf794f077eb3037a2dda013d44bce85c72da287b3be66e5
Files
-
d2750dcc86be9afaadf794f077eb3037a2dda013d44bce85c72da287b3be66e5.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
swjvphug Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
igzurttg Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE