Static task
static1
Behavioral task
behavioral1
Sample
89133f3321e8bf6b44e25919690d8cc26b217af83569bfcecd98d934c5cdeb9e.exe
Resource
win10v2004-20240611-en
General
-
Target
89133f3321e8bf6b44e25919690d8cc26b217af83569bfcecd98d934c5cdeb9e
-
Size
1.8MB
-
MD5
a4352bad12a3d48494c64c322004b819
-
SHA1
f288e155069307dff0274ee53ec295cf24ccb848
-
SHA256
89133f3321e8bf6b44e25919690d8cc26b217af83569bfcecd98d934c5cdeb9e
-
SHA512
d9eb7c3e5bc616229245d57819f991d6a6a891143a79240805cd4ef4077bc8086f28ee1c6d85baca42d2edcc7bde6862d19494c8581e7d0c96fa4451b21844a2
-
SSDEEP
49152:qleuk9XdmI1ZkW1gwGqVRFcXwpXzf9kr+Iw+GTg:qQu+AIEdwGqVRFTpjf9kE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89133f3321e8bf6b44e25919690d8cc26b217af83569bfcecd98d934c5cdeb9e
Files
-
89133f3321e8bf6b44e25919690d8cc26b217af83569bfcecd98d934c5cdeb9e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zoxlgxrh Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmmvbwdx Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE