Static task
static1
Behavioral task
behavioral1
Sample
1b1ba4d3b0ca9fdd56a35e1060fef717ca4104ca7421ab072d2f90aee9d90089.exe
Resource
win10v2004-20240508-en
General
-
Target
1b1ba4d3b0ca9fdd56a35e1060fef717ca4104ca7421ab072d2f90aee9d90089
-
Size
1.8MB
-
MD5
aded0ea77937d828064a3bc9f571b17e
-
SHA1
84b4d02c22bc1fc40c547bfa99781ff17cc9a0bd
-
SHA256
1b1ba4d3b0ca9fdd56a35e1060fef717ca4104ca7421ab072d2f90aee9d90089
-
SHA512
bb95f4f76b6524c0aba46c1d047b0905e5c71cea54285b263514012e7289c4230f5f4d81f332168dc7accab3166c9b97c175585d387fbd46bb68bdd1b254d835
-
SSDEEP
24576:4ZuaWDCrQcQ9mLYIm1GFaLi83AQq5HD7PGSXKhlFsd51mfjeLqcHC8/d2+egm:MuaWDvY0GFEi8wQqN7PP6jFK/H/Ijgm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b1ba4d3b0ca9fdd56a35e1060fef717ca4104ca7421ab072d2f90aee9d90089
Files
-
1b1ba4d3b0ca9fdd56a35e1060fef717ca4104ca7421ab072d2f90aee9d90089.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pwmccili Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wkjtiacc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE