Static task
static1
Behavioral task
behavioral1
Sample
d3e4aa355566347fcbc4a017fdd9c9850de122364f8e88fde7b7ae7ae39a5c21.exe
Resource
win10v2004-20240508-en
General
-
Target
d3e4aa355566347fcbc4a017fdd9c9850de122364f8e88fde7b7ae7ae39a5c21
-
Size
1.8MB
-
MD5
3a2566d92d0dfd354a45b18827fc8068
-
SHA1
35c60b14e06104490fe914e6a9e5d68ba881292b
-
SHA256
d3e4aa355566347fcbc4a017fdd9c9850de122364f8e88fde7b7ae7ae39a5c21
-
SHA512
fcdc6ff584a9bbda8530b6cb1b2d532725de98cbe4119dfde1cfab98d38d58c0ff276929d755f6f3897d271b82eed410fda354d466871193c4e9d55c935b32eb
-
SSDEEP
49152:lYVqB4izjXuzkeuBJDPAZnXVD2BW3yWlKcyLQK+O:4qB4iykeCJDIZnryGMZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3e4aa355566347fcbc4a017fdd9c9850de122364f8e88fde7b7ae7ae39a5c21
Files
-
d3e4aa355566347fcbc4a017fdd9c9850de122364f8e88fde7b7ae7ae39a5c21.exe .ps1 windows:6 windows x86 arch:x86 polyglot
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yhdzddkm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
veqnwrkq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE