Static task
static1
Behavioral task
behavioral1
Sample
c260ba5084f6602909b0516b82701d456698eda2138c77847efd5cb0f3261835.exe
Resource
win10v2004-20240426-en
General
-
Target
c260ba5084f6602909b0516b82701d456698eda2138c77847efd5cb0f3261835
-
Size
2.2MB
-
MD5
7d1b8283a57d3bef804027e2f0bb8f80
-
SHA1
b0e8f0acdabd71e4a47675f91a657aa576d98a9b
-
SHA256
c260ba5084f6602909b0516b82701d456698eda2138c77847efd5cb0f3261835
-
SHA512
915d6fbb9ec5c8d15a33437a93f4a3293c90bbeb3244f4cb2cfb06baf2af300668c0e2873a9d8fe93655177dba995fafff1a56b03c615ce5f40d058d2e0347a0
-
SSDEEP
49152:EkmKhyq24kI3qebVaMxizVNP7PsWggHF1F4QW1yC2SLWV8gvB:EkmKEqlkAbkME7PsWHbKz17t6V8s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c260ba5084f6602909b0516b82701d456698eda2138c77847efd5cb0f3261835
Files
-
c260ba5084f6602909b0516b82701d456698eda2138c77847efd5cb0f3261835.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xhrikdfr Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upldqymn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE