Static task
static1
Behavioral task
behavioral1
Sample
81bc788a7ed86e6e17eae6fe3e422bf4f6a31eaed7bd454d84fe33e5ca77519a.exe
Resource
win10v2004-20240426-en
General
-
Target
81bc788a7ed86e6e17eae6fe3e422bf4f6a31eaed7bd454d84fe33e5ca77519a
-
Size
2.2MB
-
MD5
8959af1134f6a94034f27954bf24bed0
-
SHA1
aec11fa188773590fe315fc49e983e7246611f4c
-
SHA256
81bc788a7ed86e6e17eae6fe3e422bf4f6a31eaed7bd454d84fe33e5ca77519a
-
SHA512
48fa53a0cc39565c79208c2faa77642b0c131d1ff36328774d79007a160cf570d2dd7390c682530b6515cbb1ad54c0a7c0df4478780cfac1eadd365294e82fbe
-
SSDEEP
49152:ikmKhyq24kI3qebVat47Y6+x8kbVb39i86kLYouNcbNkyohz:ikmKEqlkAbkS7Y6MV8kLIa4z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81bc788a7ed86e6e17eae6fe3e422bf4f6a31eaed7bd454d84fe33e5ca77519a
Files
-
81bc788a7ed86e6e17eae6fe3e422bf4f6a31eaed7bd454d84fe33e5ca77519a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cgceapqj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dgousrke Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE