Static task
static1
Behavioral task
behavioral1
Sample
725f4b70b72fce7fb99c8bf5a064a03413ad7bcc1bfeb2bd2632462860459cc3.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
725f4b70b72fce7fb99c8bf5a064a03413ad7bcc1bfeb2bd2632462860459cc3.exe
Resource
win11-20240419-en
General
-
Target
725f4b70b72fce7fb99c8bf5a064a03413ad7bcc1bfeb2bd2632462860459cc3
-
Size
1.8MB
-
MD5
aec0f8dbe345cb17b5d95143cf886645
-
SHA1
a30a8fb775010fd0c4ed19887b35e65d9475ec2b
-
SHA256
725f4b70b72fce7fb99c8bf5a064a03413ad7bcc1bfeb2bd2632462860459cc3
-
SHA512
966eed4f78a6ffab0a41a4aeefee4f06056b647028745c39ec47d97bb399b2a5390d1d5d093baf5dcdef95aac6124c7b9a31df705bc2260e7e8ac9b6a732c245
-
SSDEEP
49152:QD6ipC5ihUxojZQVR+aS59/YOuSwLjbRm:Q+ipq0WSQp7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 725f4b70b72fce7fb99c8bf5a064a03413ad7bcc1bfeb2bd2632462860459cc3
Files
-
725f4b70b72fce7fb99c8bf5a064a03413ad7bcc1bfeb2bd2632462860459cc3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wnmyhevz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
btuytrfw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE