Static task
static1
Behavioral task
behavioral1
Sample
e638bb3b6847c02f7a19ebbfc0f92c2f893b9dff7cb4a8867a7282f36626f6a7.exe
Resource
win10v2004-20240611-en
General
-
Target
e638bb3b6847c02f7a19ebbfc0f92c2f893b9dff7cb4a8867a7282f36626f6a7
-
Size
2.3MB
-
MD5
fbe1e19b44ace48a53280d58c72f467a
-
SHA1
fecd828a89404345e449686d80ecad9f1d80e491
-
SHA256
e638bb3b6847c02f7a19ebbfc0f92c2f893b9dff7cb4a8867a7282f36626f6a7
-
SHA512
0d6927e807de4305fa4f2714bb632e0ed9d2754cf7264f431021859e3430a514626df86a781d07cd86edf35a1dcf0f19ff0df38cb79ff6945c31a4f771adf1d3
-
SSDEEP
49152:7+aeusaqYD7V+264A+Qo65PB77+3puBR2jkKM3zX:2usaDe+QowP5+3puBJKM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e638bb3b6847c02f7a19ebbfc0f92c2f893b9dff7cb4a8867a7282f36626f6a7
Files
-
e638bb3b6847c02f7a19ebbfc0f92c2f893b9dff7cb4a8867a7282f36626f6a7.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cnuhqcvc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cxvhgeql Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE