Static task
static1
Behavioral task
behavioral1
Sample
d0e663f6b2d46cbec8542be9495490e59860b3da3535c6de85a719199d0fbecf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d0e663f6b2d46cbec8542be9495490e59860b3da3535c6de85a719199d0fbecf.exe
Resource
win10v2004-20240508-en
General
-
Target
d0e663f6b2d46cbec8542be9495490e59860b3da3535c6de85a719199d0fbecf
-
Size
2.3MB
-
MD5
33e8684339063ec10d967c183a3e2773
-
SHA1
c5d56088e73656e55fa8a9ba8a6b80888ef7f60d
-
SHA256
d0e663f6b2d46cbec8542be9495490e59860b3da3535c6de85a719199d0fbecf
-
SHA512
e27e90fd4fe7efb236234c7dc360fa5b18959e5daaa0027af846cae05381741d7d53a06d3ce5744c96617c9f4994bb9ff35971b5be58f1b8a2c8fa25c587229e
-
SSDEEP
49152:aAVzSNjbyOR6lGvMjRqHek+9o5OjNYqaq8rI:X8jbyOckS91aq6I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0e663f6b2d46cbec8542be9495490e59860b3da3535c6de85a719199d0fbecf
Files
-
d0e663f6b2d46cbec8542be9495490e59860b3da3535c6de85a719199d0fbecf.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 398KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hrgkaiev Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
czmlrbzo Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE