Static task
static1
Behavioral task
behavioral1
Sample
4b1dc14d5b8ef166d4d92cda7e7938691e465ac0db271126aed5f51c1e8e199d.exe
Resource
win10v2004-20240426-en
General
-
Target
4b1dc14d5b8ef166d4d92cda7e7938691e465ac0db271126aed5f51c1e8e199d
-
Size
2.2MB
-
MD5
aa1372ce006fe8e0c17895f64e32f48e
-
SHA1
c9fa7037166db21e8b24bdd991aa7708796eab61
-
SHA256
4b1dc14d5b8ef166d4d92cda7e7938691e465ac0db271126aed5f51c1e8e199d
-
SHA512
a87eebc290f3b61cbf440cdff1f7f9e32f393dd18d2e30c32d0a6249c306da4eea930b518f869cb92ab530eceb2c5e8c227490c6bab7e7098727e3bc13ba893f
-
SSDEEP
49152:jkmKhyq24kI3qebVaI0SPBTfWgxzP9gGxavMpsi7clfRd9W:jkmKEqlkAbkI0SJjWEzPWRMii7cpk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b1dc14d5b8ef166d4d92cda7e7938691e465ac0db271126aed5f51c1e8e199d
Files
-
4b1dc14d5b8ef166d4d92cda7e7938691e465ac0db271126aed5f51c1e8e199d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhcmpxjt Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdohjgfz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE