Static task
static1
Behavioral task
behavioral1
Sample
c73ea1cd90faa47b28e23cf622679d63026d4cc109982d015bb248502b5aaa7d.exe
Resource
win10v2004-20240426-en
General
-
Target
c73ea1cd90faa47b28e23cf622679d63026d4cc109982d015bb248502b5aaa7d
-
Size
2.2MB
-
MD5
90c82cf0b7baae685b25b3a4d7db2b85
-
SHA1
d7ea6e999e4dac3b78b8bc3d1db11b6a8c95b644
-
SHA256
c73ea1cd90faa47b28e23cf622679d63026d4cc109982d015bb248502b5aaa7d
-
SHA512
8b7b4d25adf1c6c4b18a66efab8253cdd7f6fb523250566f033f5d5ed8d72f7287ded74f3775823ea6e89566b0b89ba6ccacd7db132f3d460dcd139292b1495c
-
SSDEEP
49152:2kmKhyq24kI3qebVaZydB/gW/cE9VAHLPJMA48MXwcVtq7rRW0coE:2kmKEqlkAbko7/b/oPJMAtMAitqo0cb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c73ea1cd90faa47b28e23cf622679d63026d4cc109982d015bb248502b5aaa7d
Files
-
c73ea1cd90faa47b28e23cf622679d63026d4cc109982d015bb248502b5aaa7d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hgefoeya Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jyhalvpb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE