Static task
static1
Behavioral task
behavioral1
Sample
b9e1f8670c2833992a3a8cd74f88fb4fc727010aea379de286992f70c02a4703.exe
Resource
win10v2004-20240426-en
General
-
Target
b9e1f8670c2833992a3a8cd74f88fb4fc727010aea379de286992f70c02a4703
-
Size
2.3MB
-
MD5
1dd5b91d8b33ad3f5f630bc2866c06de
-
SHA1
1b3e3981c34b5843fbc6a923811acd2177e0b66f
-
SHA256
b9e1f8670c2833992a3a8cd74f88fb4fc727010aea379de286992f70c02a4703
-
SHA512
6580018dd28a4bc19f60fb0f282e49e9e3b0021d118b73d26791f7ae783a79923c2789a347fec0c44bf458642acb80d6223e1f694978a0513d754cf3ee75a07d
-
SSDEEP
49152:fYw4Y8sCtxe3QO/Xg33B7qI0ag2qYPV1cD4kiGXt6R/VZR9sfA:fYw4Y8sCO/iBOD9SckkiGXtw/XR9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e1f8670c2833992a3a8cd74f88fb4fc727010aea379de286992f70c02a4703
Files
-
b9e1f8670c2833992a3a8cd74f88fb4fc727010aea379de286992f70c02a4703.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kcrxfnjp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fppjwzxm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE