Static task
static1
Behavioral task
behavioral1
Sample
638842bd616f1676ddc56da14852b8a75b4c22de69445e8bc9636a416e541c01.exe
Resource
win10v2004-20240426-en
General
-
Target
638842bd616f1676ddc56da14852b8a75b4c22de69445e8bc9636a416e541c01
-
Size
2.3MB
-
MD5
97f62a92a45b84d2c28f5ec3d9448c22
-
SHA1
527c4439b4ded4f8ea6dd7252bc006fe22004893
-
SHA256
638842bd616f1676ddc56da14852b8a75b4c22de69445e8bc9636a416e541c01
-
SHA512
a2e79b78bf740827e8c4d01e447ea1bb3f9be6ff30deceeb8513a12e7bafd9e0bce7131020bc666ac5667660d5d389e1fba8f26d9d814dd013dc3453c5fed213
-
SSDEEP
49152:1kmKhyq24kI3qebVaLticKOl8R+HxeafKiPNfqf0oRxx7VdbKp0Q/osH:1kmKEqlkAbkccKOl8R+H+iPNfqsS7Vdc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 638842bd616f1676ddc56da14852b8a75b4c22de69445e8bc9636a416e541c01
Files
-
638842bd616f1676ddc56da14852b8a75b4c22de69445e8bc9636a416e541c01.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
picrcyyr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xegeztwx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE