Static task
static1
Behavioral task
behavioral1
Sample
ce616640a8e824fd9be928a2087178594d0b9e4b7b2ee6ff716ad241091cced1.exe
Resource
win10v2004-20240226-en
General
-
Target
ce616640a8e824fd9be928a2087178594d0b9e4b7b2ee6ff716ad241091cced1
-
Size
1.8MB
-
MD5
b4004849731e065932cf29ef9e5865c5
-
SHA1
4d5dec24f1f10bf1cbd0fcbde634069ddf824ac0
-
SHA256
ce616640a8e824fd9be928a2087178594d0b9e4b7b2ee6ff716ad241091cced1
-
SHA512
93aab4db32d74835cfced2a389eb8f28e8ffb5630710e10940a1502cd96ab2faaac7973c99ac497e281ae682d5bfa7496eda501eee7b86f8dc84aa6284dcc2b5
-
SSDEEP
49152:fW+J+TgHAIvCcjlWT+W6hv5aQe8Q2Wt3vNrU:VJvHGcjvW6Palr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce616640a8e824fd9be928a2087178594d0b9e4b7b2ee6ff716ad241091cced1
Files
-
ce616640a8e824fd9be928a2087178594d0b9e4b7b2ee6ff716ad241091cced1.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nhefzxdl Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mqyezaem Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE