Static task
static1
Behavioral task
behavioral1
Sample
e56c2d158882c7a16908b93f5d49187927547fbe9e51cea39bdb1d17bd312dd2.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
e56c2d158882c7a16908b93f5d49187927547fbe9e51cea39bdb1d17bd312dd2.exe
Resource
win11-20240426-en
General
-
Target
e56c2d158882c7a16908b93f5d49187927547fbe9e51cea39bdb1d17bd312dd2
-
Size
1.8MB
-
MD5
c406d2bafb8afcdfb6b1fc523799cedf
-
SHA1
0b5a1b962814fb275b5d38ffe32615fd27fb83e4
-
SHA256
e56c2d158882c7a16908b93f5d49187927547fbe9e51cea39bdb1d17bd312dd2
-
SHA512
6b9afda10c0c5ac2970bb14b5394707bd7e6df9e6a0b1fb71851a620ca40ee865ce23ca638717ff19f1e5722a3d4d57d9d06f7b6e2cf87a75e04b31c40cbe0f1
-
SSDEEP
24576:PZVSO1XrIabnfbAtxbMLc88ZLyTHqli7MR366G8k9a8osJJW/EQrHL/7Bi:bSOaaHaMLl81Ji7c5M9a2JA/EQ//1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e56c2d158882c7a16908b93f5d49187927547fbe9e51cea39bdb1d17bd312dd2
Files
-
e56c2d158882c7a16908b93f5d49187927547fbe9e51cea39bdb1d17bd312dd2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
simsykqw Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xtrfasmu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE