Static task
static1
Behavioral task
behavioral1
Sample
10339c7234636b4834db055a2c53634b77a93782ad813ecb17a0e3192b32ff5f.exe
Resource
win10v2004-20240508-en
General
-
Target
10339c7234636b4834db055a2c53634b77a93782ad813ecb17a0e3192b32ff5f
-
Size
2.4MB
-
MD5
75d185ed32855701252f888813a567c7
-
SHA1
9ebb22ce0d324d93b54c9cf906ae1acbff104b89
-
SHA256
10339c7234636b4834db055a2c53634b77a93782ad813ecb17a0e3192b32ff5f
-
SHA512
26d66b7d2851c6b35061f838d8e702ced8f78fc76f6c87cd0507d98433bb00c7626fff1f9a69804cbf66f9b8661aa533157f3018391f713f98bca919ac809efa
-
SSDEEP
49152:+42dlfzMSwZl2X3FeuN3b1K3kN1GNh8u2:+dTwnZl2X3hN3Gech8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10339c7234636b4834db055a2c53634b77a93782ad813ecb17a0e3192b32ff5f
Files
-
10339c7234636b4834db055a2c53634b77a93782ad813ecb17a0e3192b32ff5f.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mfuglvis Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jbsadgxb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE