Static task
static1
Behavioral task
behavioral1
Sample
ce4f5e462cabd1679c48d1500abc7184024212ce4b0dfe2a26a784c64e4bab71.exe
Resource
win10v2004-20240508-en
General
-
Target
ce4f5e462cabd1679c48d1500abc7184024212ce4b0dfe2a26a784c64e4bab71
-
Size
2.3MB
-
MD5
c12e873d5b4f66f8b90a8ff2e4aa68f6
-
SHA1
0433d166bae94ba98604470ec29586a3a8bdeb5e
-
SHA256
ce4f5e462cabd1679c48d1500abc7184024212ce4b0dfe2a26a784c64e4bab71
-
SHA512
e8340d0b1e5ce3bf0e59f353ad093bcfe95c457617a4a6c7168e574a2558caa86622564f4d00d016df4f286b1f005fd158707e43247e0757e3a3b2405839a94c
-
SSDEEP
49152:2lEh4fLwIPNSINMD5KvqUIyfgd/8EbduZM6XOC0wLfUgogEl1TEp:2lDZPE7+qfduFVMTEp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce4f5e462cabd1679c48d1500abc7184024212ce4b0dfe2a26a784c64e4bab71
Files
-
ce4f5e462cabd1679c48d1500abc7184024212ce4b0dfe2a26a784c64e4bab71.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dnylcums Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vgnsrylm Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE