Static task
static1
Behavioral task
behavioral1
Sample
1068d8d592069e4fdcc618a1ba96bd7dd084d367f54a220bb38bf9046abd89d7.exe
Resource
win10v2004-20240611-en
General
-
Target
1068d8d592069e4fdcc618a1ba96bd7dd084d367f54a220bb38bf9046abd89d7
-
Size
1.8MB
-
MD5
1418c8e8142aeb000f9792251f8b2492
-
SHA1
1bed3d3b3f353f472cf4336bea170c12d62871f7
-
SHA256
1068d8d592069e4fdcc618a1ba96bd7dd084d367f54a220bb38bf9046abd89d7
-
SHA512
a3584cac7e536d9475b822589c73c007b149b393b7e1e0ab7f8fd3f771c3ad23f1f490a1e3754db4a0d5de34f02a1a64816ca5eab66daea062c1c4f1c5b0afd0
-
SSDEEP
49152:mUoGmxzTtlNe+NCO8uEw9DyeV8d3OUG6JAtoBigA:duzTVdkw9bzwGc9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1068d8d592069e4fdcc618a1ba96bd7dd084d367f54a220bb38bf9046abd89d7
Files
-
1068d8d592069e4fdcc618a1ba96bd7dd084d367f54a220bb38bf9046abd89d7.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ojumreto Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvnsbzka Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE