Static task
static1
Behavioral task
behavioral1
Sample
80ccab8bdd27277388cd6785c11885169d4561c08dbd70cd184327baff6e83c4.exe
Resource
win10v2004-20240426-en
General
-
Target
80ccab8bdd27277388cd6785c11885169d4561c08dbd70cd184327baff6e83c4
-
Size
2.4MB
-
MD5
e4a2200591990204a2181fef6d0efd4a
-
SHA1
e56235f0a2ecfd743ef030c5da36da85f8467bf5
-
SHA256
80ccab8bdd27277388cd6785c11885169d4561c08dbd70cd184327baff6e83c4
-
SHA512
ddac957a18fd6a1df57c40ac1548ea75312942483fe9870091d57318c45c6e89beb7275e128102538018f7a06e8f3f8503119f1d4c20a4fd311a46dbaa98d8f9
-
SSDEEP
49152:LEN6/2S6AK7aqrEGIarQgWbhdcKG2o1uGdd4yBICiwdodEjjo1r:gM/2S677aGEGISQgiGgGdd4yBICcdIk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80ccab8bdd27277388cd6785c11885169d4561c08dbd70cd184327baff6e83c4
Files
-
80ccab8bdd27277388cd6785c11885169d4561c08dbd70cd184327baff6e83c4.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lsekxegs Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iqactqyl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE