Static task
static1
Behavioral task
behavioral1
Sample
dcfcdb9f8b420d3f36ad0afd49aa9e3f5872bf9591c30b037882d491ad6c4e87.exe
Resource
win10v2004-20240611-en
General
-
Target
dcfcdb9f8b420d3f36ad0afd49aa9e3f5872bf9591c30b037882d491ad6c4e87
-
Size
1.8MB
-
MD5
409e0dc91c049f2c7e6c963045d7d377
-
SHA1
3710d4d30dd86494d2d0167a705706f2a2d548a3
-
SHA256
dcfcdb9f8b420d3f36ad0afd49aa9e3f5872bf9591c30b037882d491ad6c4e87
-
SHA512
fd5faa06f37bf220f3c5b605693ffb282d56de16c1706e2e292ee01896f301504701e4b9e269d0d63c9c2699fa9682b4f8f371214caccb1d74653b7f748aaf17
-
SSDEEP
49152:ixVwRMGsa49AxBKfJREOYQIxow/ilYGtVz:ixpa4e46/6SIVz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcfcdb9f8b420d3f36ad0afd49aa9e3f5872bf9591c30b037882d491ad6c4e87
Files
-
dcfcdb9f8b420d3f36ad0afd49aa9e3f5872bf9591c30b037882d491ad6c4e87.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qpvhrfso Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtjrdiqy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE