Static task
static1
Behavioral task
behavioral1
Sample
b14a0f96d337a31d280461962eb799c57d0a0e724b8b5d704a040344655cbc95.exe
Resource
win10v2004-20240508-en
General
-
Target
b14a0f96d337a31d280461962eb799c57d0a0e724b8b5d704a040344655cbc95
-
Size
2.3MB
-
MD5
2f1168a237b3b15e3e2c7b6fd1b41702
-
SHA1
508ea984ef13716e568a7a5b80524f1cd33c218f
-
SHA256
b14a0f96d337a31d280461962eb799c57d0a0e724b8b5d704a040344655cbc95
-
SHA512
cf946f92b876f74adce904d04c085878c5c62f3317cd845dacf0d645c8e3e16f6fff6cf3cb44a50011359564addd76c5a37efd2677c92a0e5f26d78b08d4956b
-
SSDEEP
49152:zkmKhyq24kI3qebVa4yFLDqFGov9cVAd69TNqZLNiMNoCya:zkmKEqlkAbklZqFGC9V40ZBNo7a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b14a0f96d337a31d280461962eb799c57d0a0e724b8b5d704a040344655cbc95
Files
-
b14a0f96d337a31d280461962eb799c57d0a0e724b8b5d704a040344655cbc95.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ivxhxhfy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pljdfxpv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE