Static task
static1
Behavioral task
behavioral1
Sample
2e34afb5f81177836d22427b7485dee10e70de7bdfe050cb02011eab469b4f69.exe
Resource
win10v2004-20240426-en
General
-
Target
2e34afb5f81177836d22427b7485dee10e70de7bdfe050cb02011eab469b4f69
-
Size
2.3MB
-
MD5
94ef66e0c28567b47e4d599a0e41e9b4
-
SHA1
1ba0bcd65bd82db047755c7ab9f142299adf01fd
-
SHA256
2e34afb5f81177836d22427b7485dee10e70de7bdfe050cb02011eab469b4f69
-
SHA512
6e4c6216dc397ef3029810e6790be6e7e644244885f74601bbd3e5e5ed89ce02151f924eb384ed2052eeb962ffe38feb916195581f0dc91784d839fc9be31896
-
SSDEEP
49152:Ra3N8klXkV96DSPL8s/unYTiNT+rUiNdCJrnB9KgT6PyRTLuM:RHKUV96fs2YTkT+rUI0nBggz56M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e34afb5f81177836d22427b7485dee10e70de7bdfe050cb02011eab469b4f69
Files
-
2e34afb5f81177836d22427b7485dee10e70de7bdfe050cb02011eab469b4f69.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edwwiqbf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yrcsrxrn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE