Static task
static1
Behavioral task
behavioral1
Sample
5f1a6716a45f138c9723b064b00a47f548918b18ee5629dd2059c72f8b8224a3.exe
Resource
win10v2004-20240426-en
General
-
Target
5f1a6716a45f138c9723b064b00a47f548918b18ee5629dd2059c72f8b8224a3
-
Size
2.3MB
-
MD5
6f65d101e0a79bea27f19e96b325716b
-
SHA1
54f40bf98500f9c10acc12d9429fb287251cb3d8
-
SHA256
5f1a6716a45f138c9723b064b00a47f548918b18ee5629dd2059c72f8b8224a3
-
SHA512
77988f75efa502ce9513cda4c6b9e3a51d0b12b5ec1804ac293105415455eb17004e6af9d146768ac0f448f65825c6c51ccb3712cf5e2f64e0b8c1efacd94a09
-
SSDEEP
49152:+/kCvQzun8IgndOUMVoP9jbwea4iKVz43CXyIjh:GkC1n+dYuP9Xweaml4yXyIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f1a6716a45f138c9723b064b00a47f548918b18ee5629dd2059c72f8b8224a3
Files
-
5f1a6716a45f138c9723b064b00a47f548918b18ee5629dd2059c72f8b8224a3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xkqxtjoq Size: 1.6MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dqzopxql Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE