Static task
static1
Behavioral task
behavioral1
Sample
30a8490bed5472c5ad46d7688899cdb5ef46c80fbe6a2c1b79c2820b8c17fa48.exe
Resource
win10v2004-20240611-en
General
-
Target
30a8490bed5472c5ad46d7688899cdb5ef46c80fbe6a2c1b79c2820b8c17fa48
-
Size
1.9MB
-
MD5
087e2bb08b65cb18581174a0a7d39229
-
SHA1
c23b0a682be8b25ff1fba96cead1507467723e9a
-
SHA256
30a8490bed5472c5ad46d7688899cdb5ef46c80fbe6a2c1b79c2820b8c17fa48
-
SHA512
bdc54899360b8cec2f592727285a53d8042114e8d14c2f10a8b0fb5a2a1bfba8a848df12db795776290c85c738b14b87d9acbee60c36a626ecc8113570df05b1
-
SSDEEP
49152:LE/G4qWanmfU7Y1SF4kBuANOCxhS2DL6W33:LnHPnmf2n7BuAZu2Dp3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a8490bed5472c5ad46d7688899cdb5ef46c80fbe6a2c1b79c2820b8c17fa48
Files
-
30a8490bed5472c5ad46d7688899cdb5ef46c80fbe6a2c1b79c2820b8c17fa48.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dwvkchrk Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qwrfxvqt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE