Static task
static1
Behavioral task
behavioral1
Sample
31b3a198ab975b8118864e762a3a74364ee279aef7fe987c5632bcc1915858ae.exe
Resource
win10v2004-20240426-en
General
-
Target
31b3a198ab975b8118864e762a3a74364ee279aef7fe987c5632bcc1915858ae
-
Size
1.8MB
-
MD5
02e91d98e12207c4473852bce3568320
-
SHA1
ca469f24ef0d675edf4cbf17a194152a46d9f474
-
SHA256
31b3a198ab975b8118864e762a3a74364ee279aef7fe987c5632bcc1915858ae
-
SHA512
c2756849a0371d3f5f10165686563e430afea492569fd4c555c2f7ac1eb8b657881c112d50240df9612dd7ef23626de0678ee87f542b14112e25cf47f21fa0d1
-
SSDEEP
24576:bw+nf4ThJTnw90+THutAeNhQevt5tcfvp9yBWeFPQyYsdXgZR:PnQ3nGOCeFt5CfvpTqMqS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 31b3a198ab975b8118864e762a3a74364ee279aef7fe987c5632bcc1915858ae
Files
-
31b3a198ab975b8118864e762a3a74364ee279aef7fe987c5632bcc1915858ae.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
alplynvr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uazktksa Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE