Static task
static1
Behavioral task
behavioral1
Sample
ded2805f98f6d957dd643125db2c386ac70657ef877d2d443c2f75ef75eda6e8.exe
Resource
win10v2004-20240426-en
General
-
Target
ded2805f98f6d957dd643125db2c386ac70657ef877d2d443c2f75ef75eda6e8
-
Size
2.4MB
-
MD5
243f6e4f3396c61d879967893f4505f2
-
SHA1
ec5fc751cd4a32ffa06097e477299e5619ec27ac
-
SHA256
ded2805f98f6d957dd643125db2c386ac70657ef877d2d443c2f75ef75eda6e8
-
SHA512
18e485bcdb7c03a424308ab9fd3ce15aa5ddd604598178d1c52727f847860a67e808dc77db3e7c819f0fdec4722a8d1bb04689062be7e00f034815602e89f4da
-
SSDEEP
49152:aPhRBaRoQGlzIETEhcZuWfw4aANEXiZ+dB7UDOLSjPwn:aZ31Z/IhQuWHuXfsK0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ded2805f98f6d957dd643125db2c386ac70657ef877d2d443c2f75ef75eda6e8
Files
-
ded2805f98f6d957dd643125db2c386ac70657ef877d2d443c2f75ef75eda6e8.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nwvqcnur Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zrlwahhw Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE