Static task
static1
Behavioral task
behavioral1
Sample
c8c73afb30a6684a4fb6de4e2080f80c9ac78f2debe70da5e6cab4f24e4de404.exe
Resource
win10v2004-20240508-en
General
-
Target
c8c73afb30a6684a4fb6de4e2080f80c9ac78f2debe70da5e6cab4f24e4de404
-
Size
2.3MB
-
MD5
565a2f6024c731cbaa9389e4c2899aa8
-
SHA1
4af092241bdb5291e85d5951bdc4c19241a863c4
-
SHA256
c8c73afb30a6684a4fb6de4e2080f80c9ac78f2debe70da5e6cab4f24e4de404
-
SHA512
b9b795e48cf156bbffc5a461ec4cbbe0a6638582cad44d5fc7b173780b4e357d94672dd9aa985d50eed929903acf0fcbed01dca47fecea78ad444409edbd94ab
-
SSDEEP
49152:6kmKhyq24kI3qebVa5NGOzjwosAgu6LNewol/HMK99:6kmKEqlkAbk5NGOfwovB6LToK89
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8c73afb30a6684a4fb6de4e2080f80c9ac78f2debe70da5e6cab4f24e4de404
Files
-
c8c73afb30a6684a4fb6de4e2080f80c9ac78f2debe70da5e6cab4f24e4de404.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xklheydx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kbnczhle Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE