Static task
static1
Behavioral task
behavioral1
Sample
3ad5bcd8ca1283d0a48ce2c988fcc885f0f26749552ee32720536bb463df077c.exe
Resource
win10v2004-20240611-en
General
-
Target
3ad5bcd8ca1283d0a48ce2c988fcc885f0f26749552ee32720536bb463df077c
-
Size
1.9MB
-
MD5
f053eec442f7a3ddc7fe0a977bde9f55
-
SHA1
8444c3f63e55e346a3baa4b4f3f4f275ceaba69a
-
SHA256
3ad5bcd8ca1283d0a48ce2c988fcc885f0f26749552ee32720536bb463df077c
-
SHA512
83c0f80b42e68f2a86c168952b4e7d7104f6731c594395658042f013b7f1e69df6eb1d1f01cee8a2f47b3ef6889269fb6899076a8734b8703252b54d1f3ed1f4
-
SSDEEP
49152:KX0JXyqcJZ/k+sBGTfzN0Z92aTucTFfam:PRaZ/k+sB8fsTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ad5bcd8ca1283d0a48ce2c988fcc885f0f26749552ee32720536bb463df077c
Files
-
3ad5bcd8ca1283d0a48ce2c988fcc885f0f26749552ee32720536bb463df077c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tujhbatw Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kdqvqhis Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE