Static task
static1
Behavioral task
behavioral1
Sample
03932941d17a8c0238e2ba8e2b9e5c30aaa225925f3616597f29df021209cda8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03932941d17a8c0238e2ba8e2b9e5c30aaa225925f3616597f29df021209cda8.exe
Resource
win10v2004-20240508-en
General
-
Target
03932941d17a8c0238e2ba8e2b9e5c30aaa225925f3616597f29df021209cda8
-
Size
6.0MB
-
MD5
9f96cfa6c073501d24bfc1021665896c
-
SHA1
f224e0143d16dd53c0e8a25f3306a904a4eadb9c
-
SHA256
03932941d17a8c0238e2ba8e2b9e5c30aaa225925f3616597f29df021209cda8
-
SHA512
cea43cf436d725f088ff105d47bce4966f7eb755f9cb17c357b4c3be8ef9eed553243d830ccb47cd0f4b915ba48e22cf3e8d4a94f42480fddcea7984381bdb1e
-
SSDEEP
98304:yCC2ExuiRV0WEXv7aEZrJnP54tvRthUw+9sI/MbZawgbFPv5Ljkhp/UdG:yCC2TiA5eERJnh4Kdi0wuPv5LYr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03932941d17a8c0238e2ba8e2b9e5c30aaa225925f3616597f29df021209cda8
Files
-
03932941d17a8c0238e2ba8e2b9e5c30aaa225925f3616597f29df021209cda8.exe windows:6 windows x64 arch:x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.5MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 474KB - Virtual size: 675KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cbszigcs Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdonvwzg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE