Static task
static1
Behavioral task
behavioral1
Sample
f7115bbb4884c5903f9c1c28ab95dee410556bf0e76186ea1aee68217910d131.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
f7115bbb4884c5903f9c1c28ab95dee410556bf0e76186ea1aee68217910d131.exe
Resource
win11-20240611-en
General
-
Target
f7115bbb4884c5903f9c1c28ab95dee410556bf0e76186ea1aee68217910d131
-
Size
1.8MB
-
MD5
aed0ac7a273779c58d7ae0367cfa9f2d
-
SHA1
fd2a2bbad0966f3ee3459c21a27eee9222432a47
-
SHA256
f7115bbb4884c5903f9c1c28ab95dee410556bf0e76186ea1aee68217910d131
-
SHA512
c430de43200b4c75bff8fe09691396bdce5fd1b0c182e4cc77241b7221140336e92912ff836e8e094196f621fc71d5c7998d219c5bb6f2c408c9fe9a7d173935
-
SSDEEP
49152:LIykz7qkK4/sex2oe/Mb7hHsiB6erc3aQfCi:Ed7qUx2o6oJZoevi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7115bbb4884c5903f9c1c28ab95dee410556bf0e76186ea1aee68217910d131
Files
-
f7115bbb4884c5903f9c1c28ab95dee410556bf0e76186ea1aee68217910d131.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vrhqvzwj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dfvsagvm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE