Static task
static1
Behavioral task
behavioral1
Sample
79a1064178e0b560583ad1352fd603adfd1de48c03982ba0fa8595e3a497fa56.exe
Resource
win10v2004-20240508-en
General
-
Target
79a1064178e0b560583ad1352fd603adfd1de48c03982ba0fa8595e3a497fa56
-
Size
1.8MB
-
MD5
0d37a6adb9fc4b89b8c1b431615e0ba2
-
SHA1
510eb64d5d85531b27f3f61d0876d5502f863cc6
-
SHA256
79a1064178e0b560583ad1352fd603adfd1de48c03982ba0fa8595e3a497fa56
-
SHA512
94205f71129852570e19117759a84b0338933d7b90064785a19f5711c8b51a69dbc4e4fde0da78ded52b06c1e25f48bc511f82293f0d9e4f1321d703f445addb
-
SSDEEP
49152:NGIcEkz3VyF2u9XEGbWO1UJERPD/Po/lzDbO8cx60WPj5W:QIdkrVyFt9XEGbD1UJWARqxUj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79a1064178e0b560583ad1352fd603adfd1de48c03982ba0fa8595e3a497fa56
Files
-
79a1064178e0b560583ad1352fd603adfd1de48c03982ba0fa8595e3a497fa56.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdqhzqqy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
buqmkgow Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE