Static task
static1
Behavioral task
behavioral1
Sample
5898621aa099c6911fc3a108e246cd70ce182e570443a83488ce0591c315ee91.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5898621aa099c6911fc3a108e246cd70ce182e570443a83488ce0591c315ee91.exe
Resource
win10v2004-20240508-en
General
-
Target
5898621aa099c6911fc3a108e246cd70ce182e570443a83488ce0591c315ee91
-
Size
44KB
-
MD5
38b08b9b35698b2a485968806d438805
-
SHA1
5f2d27c299dc99f74d6efc82f917e06b91e31104
-
SHA256
5898621aa099c6911fc3a108e246cd70ce182e570443a83488ce0591c315ee91
-
SHA512
12971e29865b246e40b56a4a77b092fed547c13a0ca1c39c9d62252ddcb77c49d5bb9a31dd9593dc99a0e7d841ea875b5b5f743893a476dcf4587dc32ad1d1ac
-
SSDEEP
192:IMf14oAITa53VY2N0Osp/tYy5VHFuZ770Nkwffopd06+4zah0jJsUSvYjVX:I7nITa53VrY/3Fvak8d06+KaSjJ9ym
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5898621aa099c6911fc3a108e246cd70ce182e570443a83488ce0591c315ee91
Files
-
5898621aa099c6911fc3a108e246cd70ce182e570443a83488ce0591c315ee91.exe windows:4 windows x64 arch:x64
015c1949514d8299d0ebdb9d4b68f6f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DelayLoadFailureHook
GetComputerNameW
GetModuleHandleW
GetStdHandle
HeapAlloc
HeapFree
ResolveDelayLoadedAPI
WideCharToMultiByte
WriteConsoleW
WriteFile
ucrtbase
__p___argc
__p___wargv
__stdio_common_vswprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
exit
wcsncmp
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ