Static task
static1
Behavioral task
behavioral1
Sample
1819ecc8dff0502cf3deb84cfef61f30435ad59f1c58986b9cc000bce3a2f2e0.exe
Resource
win10v2004-20240508-en
General
-
Target
1819ecc8dff0502cf3deb84cfef61f30435ad59f1c58986b9cc000bce3a2f2e0
-
Size
1.8MB
-
MD5
bc5884b85cb620a722f923a1203c849f
-
SHA1
67427463963716e768542bdc5ac3e32f6239d404
-
SHA256
1819ecc8dff0502cf3deb84cfef61f30435ad59f1c58986b9cc000bce3a2f2e0
-
SHA512
054322d8e962c7896088a8b144523172a2793a26dd9b96b556512171011c300b340601f0664c2ade2ba9dcee984b3d1fe0d44b2c750b92bf6adfd4b96e83f7d3
-
SSDEEP
49152:jUTHEaFW+lE1I4qQLmjwkagO4PxSJ0v9D:jUoaFAmDagOExo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1819ecc8dff0502cf3deb84cfef61f30435ad59f1c58986b9cc000bce3a2f2e0
Files
-
1819ecc8dff0502cf3deb84cfef61f30435ad59f1c58986b9cc000bce3a2f2e0.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtbvespi Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vwioveuc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE