Static task
static1
Behavioral task
behavioral1
Sample
3082509b3cd5504383813a2f89b248239824ec7a056ac68af9b670f39d47be44.exe
Resource
win10v2004-20240611-en
General
-
Target
3082509b3cd5504383813a2f89b248239824ec7a056ac68af9b670f39d47be44
-
Size
1.8MB
-
MD5
58dd032f39e0372e06e9dab8b40d5d9b
-
SHA1
ce10a8400d10d11e29947dd624c0adf9d589a68c
-
SHA256
3082509b3cd5504383813a2f89b248239824ec7a056ac68af9b670f39d47be44
-
SHA512
be4cf39a68d2f45063fcbefcf202e11bd62fa0d7488dc4a6f595e8ead0f586491516d525bdf6b9905eb8b77f5a9c670fb7aee23faa04e551e0627f29e051d572
-
SSDEEP
49152:fyZ1m3CQNiWC2N+dDcmW4dy7Z1caiLUY6cMzdh/gd:fycNO2NuImJCOzIY6cMzd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3082509b3cd5504383813a2f89b248239824ec7a056ac68af9b670f39d47be44
Files
-
3082509b3cd5504383813a2f89b248239824ec7a056ac68af9b670f39d47be44.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sfjlohcz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nibakqgd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE