Static task
static1
Behavioral task
behavioral1
Sample
736ee98b99fd5820820be99da576e4ee122af4eef39d094f5b849493781c7a16.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
736ee98b99fd5820820be99da576e4ee122af4eef39d094f5b849493781c7a16.exe
Resource
win11-20240611-en
General
-
Target
736ee98b99fd5820820be99da576e4ee122af4eef39d094f5b849493781c7a16
-
Size
1.8MB
-
MD5
0331ac8bd9c043fadb7afae7985dcf00
-
SHA1
4f4a1a0cf9ef2075751d66bcce9890959f3b4df8
-
SHA256
736ee98b99fd5820820be99da576e4ee122af4eef39d094f5b849493781c7a16
-
SHA512
e103b6d82c3789cb0207816271002b2e4f4811518cdb5e1520e759c83562dc367dc335637a9e3b5ea9bb281ebe0b2f7f37179d3c7cca707fd668dd07cb14b8fb
-
SSDEEP
24576:YMFvSr4hVIi17v2WOcyRZynkivzZ8u/ZiY0DC35PY0CQWd+Mv8B:YTIIE78c6Zynk69WWJA0VWcMEB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 736ee98b99fd5820820be99da576e4ee122af4eef39d094f5b849493781c7a16
Files
-
736ee98b99fd5820820be99da576e4ee122af4eef39d094f5b849493781c7a16.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xclbwcdv Size: 1.6MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqjkagfs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE