Static task
static1
Behavioral task
behavioral1
Sample
229f7b9a6a1bdf513dd0226f2e00e553965c7c7038908bf5a49b00fa8745c046.exe
Resource
win10v2004-20240426-en
General
-
Target
229f7b9a6a1bdf513dd0226f2e00e553965c7c7038908bf5a49b00fa8745c046
-
Size
2.2MB
-
MD5
4f61a19e142789fe49ae1e214bfc1a69
-
SHA1
c3ee1ef2536b759ffc56f1fed3b30eb2d531ff4a
-
SHA256
229f7b9a6a1bdf513dd0226f2e00e553965c7c7038908bf5a49b00fa8745c046
-
SHA512
ae6af0dfbfe0c3f6a4ddca81df756011531adced9d42aec51a73299b857ca723b700003155b21845f66bb190f4bc25a9b40d6429b05f8c7d033ac8ff8d32c561
-
SSDEEP
49152:1kmKhyq24kI3qebVaaPxcxCZdQDPo6PWM128KQToim:1kmKEqlkAbkmYz5PBVc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 229f7b9a6a1bdf513dd0226f2e00e553965c7c7038908bf5a49b00fa8745c046
Files
-
229f7b9a6a1bdf513dd0226f2e00e553965c7c7038908bf5a49b00fa8745c046.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qitizxtu Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xribatmj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE