Static task
static1
Behavioral task
behavioral1
Sample
ed1a118567f1e5200fc0b4171cb873ec43be8ea212b25e87224769955336aedd.exe
Resource
win10v2004-20240426-en
General
-
Target
ed1a118567f1e5200fc0b4171cb873ec43be8ea212b25e87224769955336aedd
-
Size
1.8MB
-
MD5
9f2f8eab49790c654dd41d04c422d704
-
SHA1
7cb5fccb7d0acc30a9c2fb79ba8187efbdd75248
-
SHA256
ed1a118567f1e5200fc0b4171cb873ec43be8ea212b25e87224769955336aedd
-
SHA512
f45157f7235a467c3ca4384a12a33dc388b5b1f7ead02db306d530db8719b0b1d9d57c8bab3b4ceb53d500079513f95b148ed175940f6a1173575d3c9b4f4096
-
SSDEEP
49152:T0Dq0IEAO5S5Rr+R3jcla3u19nugkSNoJUOGxMjW:T02C5S7WTqug9P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed1a118567f1e5200fc0b4171cb873ec43be8ea212b25e87224769955336aedd
Files
-
ed1a118567f1e5200fc0b4171cb873ec43be8ea212b25e87224769955336aedd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zfcgygii Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gsjbvihe Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE