Static task
static1
Behavioral task
behavioral1
Sample
49c435b1d5b2ba9c879fd4e90f8f4e2619c2b7d4d616480d48f75fe6dd91f867.exe
Resource
win10v2004-20240426-en
General
-
Target
49c435b1d5b2ba9c879fd4e90f8f4e2619c2b7d4d616480d48f75fe6dd91f867
-
Size
1.8MB
-
MD5
aad80fb7f941706d746a888b39d3cbf0
-
SHA1
779e6f1ce7d5039134a50962ff3b95e0f964b9ed
-
SHA256
49c435b1d5b2ba9c879fd4e90f8f4e2619c2b7d4d616480d48f75fe6dd91f867
-
SHA512
cf07b0962bd1c8bce6145a9584267bd7e78e42c80bb7c9047ca015c7d58ffcbb9e1787d5577e10abb4416f22559ff3edbd008fca39ac69f3bc45cfe1dac43b02
-
SSDEEP
49152:USmg/0n9j2TKC1ot+a6To15LEuQBZaql/yGt:USmgs2q/6TE9AaKyI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49c435b1d5b2ba9c879fd4e90f8f4e2619c2b7d4d616480d48f75fe6dd91f867
Files
-
49c435b1d5b2ba9c879fd4e90f8f4e2619c2b7d4d616480d48f75fe6dd91f867.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqxlpfoj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fsasphbj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE