Static task
static1
Behavioral task
behavioral1
Sample
9387b3b0e401f46c7e6e6f13f953d09576ddc6ca7a1ed41765a25547e51ba871.exe
Resource
win10v2004-20240611-en
General
-
Target
9387b3b0e401f46c7e6e6f13f953d09576ddc6ca7a1ed41765a25547e51ba871
-
Size
1.8MB
-
MD5
702918dd545d7c4bb479134f3ae20ce8
-
SHA1
45fb757feee6fba1422587e3dfd8d63b3a5ce295
-
SHA256
9387b3b0e401f46c7e6e6f13f953d09576ddc6ca7a1ed41765a25547e51ba871
-
SHA512
53672af10d9c6a4759abba2c44c870ac96f46fd7e5aaa715e05981c62e132d46529dd7901938a4f2e75e599d71956af85ce7aca467ae37d0036eeddbb1122531
-
SSDEEP
49152:IlF19fNVXd5d2JhiRmOfxsVCjtEa8hM5x/:Iz19fN9LfxsVCSl+5x/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9387b3b0e401f46c7e6e6f13f953d09576ddc6ca7a1ed41765a25547e51ba871
Files
-
9387b3b0e401f46c7e6e6f13f953d09576ddc6ca7a1ed41765a25547e51ba871.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wxxxblug Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
thowyqhw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE