Static task
static1
Behavioral task
behavioral1
Sample
5862af7141cfca0ba888239c6c008712653f7240961d2e10afc8662d5f9dc864.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
5862af7141cfca0ba888239c6c008712653f7240961d2e10afc8662d5f9dc864.exe
Resource
win11-20240611-en
General
-
Target
5862af7141cfca0ba888239c6c008712653f7240961d2e10afc8662d5f9dc864
-
Size
1.9MB
-
MD5
36f52a30ffaf5698effe507c8054160d
-
SHA1
69fcb218f92573172bab757fb3ce4828910f82b6
-
SHA256
5862af7141cfca0ba888239c6c008712653f7240961d2e10afc8662d5f9dc864
-
SHA512
323f7e47b9342f9174fb9c20e7818b60e883e7ae1c5dfd4d10036066c30110188657a277a5b80b8807675789b6fc1e69b6a9fc78809592eeb764c873fe153376
-
SSDEEP
49152:HGtRU6Hc3nWiLcFLQsMfwzeKFiuoeS/IvXoSK6zWPuB:Ie683Wse+fwzVsNn/IvfFWPu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5862af7141cfca0ba888239c6c008712653f7240961d2e10afc8662d5f9dc864
Files
-
5862af7141cfca0ba888239c6c008712653f7240961d2e10afc8662d5f9dc864.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
paxmfxic Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cijsvdks Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE