Static task
static1
Behavioral task
behavioral1
Sample
82123851e893810769e8fff94475700870e37b64235e3c95ed96a329d26dbc75.exe
Resource
win10v2004-20240426-en
General
-
Target
82123851e893810769e8fff94475700870e37b64235e3c95ed96a329d26dbc75
-
Size
2.4MB
-
MD5
ea037b49fc88bafb03aea3eeccbcb771
-
SHA1
ad8b6d0264ce42740d49e97185dea181a63f1fd7
-
SHA256
82123851e893810769e8fff94475700870e37b64235e3c95ed96a329d26dbc75
-
SHA512
129a7062801d536f867946899cd714800cc1e2f444e2aa4f4bd6326ed71edd31b221e771b19dde9875903306b7823b7f427ad73a56f2130cc525cf6689dc5dec
-
SSDEEP
49152:PwFw74r0gWUVEq06ZgMXBq5gTa4l6DMhV:ou7I1DnLX2g3kOV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82123851e893810769e8fff94475700870e37b64235e3c95ed96a329d26dbc75
Files
-
82123851e893810769e8fff94475700870e37b64235e3c95ed96a329d26dbc75.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wmntuvyk Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oesugobs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE