Static task
static1
Behavioral task
behavioral1
Sample
c187fd367854caa490479be61ba9e6713057afda9f9f1d143fc95ea21b30888a.exe
Resource
win10v2004-20240508-en
General
-
Target
c187fd367854caa490479be61ba9e6713057afda9f9f1d143fc95ea21b30888a
-
Size
1.8MB
-
MD5
4ebfaedee9d060c8dee8b66e071235ff
-
SHA1
236239748f931f694ec5cbbf01dbb504ec0af0b1
-
SHA256
c187fd367854caa490479be61ba9e6713057afda9f9f1d143fc95ea21b30888a
-
SHA512
579c8ef091682bab3e2ca6d0e316ecbf285cace50333f039f9a1e2d253119e97ede69e4ee2d3257fa63d2f0a8c06be03f7c169ee90a2d9781a74d9ebaa73695e
-
SSDEEP
49152:8xgFCT9D3Fz9SV+yKWth0eXhwtkm3oOIlDXt:8+8TbpNIXhwtk6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c187fd367854caa490479be61ba9e6713057afda9f9f1d143fc95ea21b30888a
Files
-
c187fd367854caa490479be61ba9e6713057afda9f9f1d143fc95ea21b30888a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ztsfmcvl Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vukbpbva Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE