Static task
static1
Behavioral task
behavioral1
Sample
d0ffd395246402fb94b6e42cd4907eb769cb16be9fd65183991edbce49e7e04b.exe
Resource
win10v2004-20240508-en
General
-
Target
d0ffd395246402fb94b6e42cd4907eb769cb16be9fd65183991edbce49e7e04b
-
Size
1.8MB
-
MD5
c7e0b1c1445a7b2bc93dcae1c927c1bc
-
SHA1
481f3069860c8b15f52a22bd6e4a4cbf9647ae05
-
SHA256
d0ffd395246402fb94b6e42cd4907eb769cb16be9fd65183991edbce49e7e04b
-
SHA512
2953f58fff9657bd524930fd50642731ddaaa49e370b9d74302a18ca38569bdf26567d21a735e02e873d8d05967cf2e609b3badab6cf0674e52f32558dc47b54
-
SSDEEP
49152:cyhHxu54DhLdW5wA45LNJ/o2gHloSLHLKplN:VHxu+1JA45LnbQl9rK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d0ffd395246402fb94b6e42cd4907eb769cb16be9fd65183991edbce49e7e04b
Files
-
d0ffd395246402fb94b6e42cd4907eb769cb16be9fd65183991edbce49e7e04b.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
flpghwpt Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iqfknecb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE