Static task
static1
Behavioral task
behavioral1
Sample
c85a331c6c2c8ce617b2c80c45f3fa9c22dd2bbe461a2f5b7ab042ec394f4bd1.exe
Resource
win10v2004-20240508-en
General
-
Target
c85a331c6c2c8ce617b2c80c45f3fa9c22dd2bbe461a2f5b7ab042ec394f4bd1
-
Size
1.9MB
-
MD5
62071def9c66134b49b6f603d74bed23
-
SHA1
8d75934ba64ae1885a249f38054e6a1073dc2a59
-
SHA256
c85a331c6c2c8ce617b2c80c45f3fa9c22dd2bbe461a2f5b7ab042ec394f4bd1
-
SHA512
6d607f896d8d5efb7e33c9958b545b052d830111383c92e1cbdbcd673aa62863fee702f1b648e178841cb0bc2ce92dd689e719d9899cfbe4014f3e4d5b3ed52c
-
SSDEEP
49152:X0BAH1eZ4gk+pfKyCYYm1iycYakjytwP8KByvQhC6qLwia+f2:X0DWmpfdYmg8akjgcy4hORf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c85a331c6c2c8ce617b2c80c45f3fa9c22dd2bbe461a2f5b7ab042ec394f4bd1
Files
-
c85a331c6c2c8ce617b2c80c45f3fa9c22dd2bbe461a2f5b7ab042ec394f4bd1.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tpkftqnn Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pzifgchi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE