Static task
static1
Behavioral task
behavioral1
Sample
dfe0f0182bb10504ecc8c77cac7bee8c869d904a0ccce7d6fa241bcbb119f9a9.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
dfe0f0182bb10504ecc8c77cac7bee8c869d904a0ccce7d6fa241bcbb119f9a9.exe
Resource
win10-20240404-en
General
-
Target
dfe0f0182bb10504ecc8c77cac7bee8c869d904a0ccce7d6fa241bcbb119f9a9
-
Size
1.8MB
-
MD5
eeb50af14e69121461e1b65b8ed98d7e
-
SHA1
010ce45fd06c398c031bc01971c6db208da91554
-
SHA256
dfe0f0182bb10504ecc8c77cac7bee8c869d904a0ccce7d6fa241bcbb119f9a9
-
SHA512
be3a8f70a912c2dbfe6d0c39d6e0fedaa629f63468ee8e737a6cb11e880d363c7f716bab32b9e568f8328b6c1d1334569b7c3b84d7c87b0100872a41c55524dc
-
SSDEEP
49152:Izb1GzN/vEpu5b9B0s6S8yLjao8j6X/6/aZ:6boJ0pmnfUu/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe0f0182bb10504ecc8c77cac7bee8c869d904a0ccce7d6fa241bcbb119f9a9
Files
-
dfe0f0182bb10504ecc8c77cac7bee8c869d904a0ccce7d6fa241bcbb119f9a9.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bjmqrriy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sqbkeqmw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE