Static task
static1
Behavioral task
behavioral1
Sample
977e05e5c2af0c7daeae198b9e0afda2d123573f0ab770a738372801c57aa573.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
977e05e5c2af0c7daeae198b9e0afda2d123573f0ab770a738372801c57aa573.exe
Resource
win11-20240611-en
General
-
Target
977e05e5c2af0c7daeae198b9e0afda2d123573f0ab770a738372801c57aa573
-
Size
1.8MB
-
MD5
6b54d78c35450637b9b344b1e7bba23d
-
SHA1
b5143a9383cfa664fb645a7e1c34437523c8ee0d
-
SHA256
977e05e5c2af0c7daeae198b9e0afda2d123573f0ab770a738372801c57aa573
-
SHA512
68beb983783eaf3e9a20d7dae65f93bcf0d150c0077a5b81a1119d3544d1676234f818524b36b3dedc139b0ebb60abe7abab41d55f58ec1b465e751953d530b4
-
SSDEEP
49152:R9zVw2Mp2Ur+K6tuF2aDgp89kYioffM7YdY7iXv:XVw24rCtu8+kifM7IY2/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 977e05e5c2af0c7daeae198b9e0afda2d123573f0ab770a738372801c57aa573
Files
-
977e05e5c2af0c7daeae198b9e0afda2d123573f0ab770a738372801c57aa573.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rlmtvtet Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rzyftowl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE