Static task
static1
Behavioral task
behavioral1
Sample
263504bce5e51f15f8b9a0b376c99379d6a712f2da4c2b89ea788362a1423c48.exe
Resource
win10v2004-20240704-en
General
-
Target
263504bce5e51f15f8b9a0b376c99379d6a712f2da4c2b89ea788362a1423c48
-
Size
1.8MB
-
MD5
2b40e7d062938f5ebaa511026e8b1824
-
SHA1
cd9f5035db74825fcd65a991372c7441d5a2862c
-
SHA256
263504bce5e51f15f8b9a0b376c99379d6a712f2da4c2b89ea788362a1423c48
-
SHA512
369b40802a760777c42b1e5d49292bbf39a70345c7b6e9c3e09e25a1454e5b49f2c9ed1940d7d1796b846bacf8c16c4de43b3f08c9fd5b24af2ee9b2bf1b7cb9
-
SSDEEP
49152:YI3UJ/OxULN589RouUJs6ulzEKRjjiZmC:YIkJGxMe6uqKRj2A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 263504bce5e51f15f8b9a0b376c99379d6a712f2da4c2b89ea788362a1423c48
Files
-
263504bce5e51f15f8b9a0b376c99379d6a712f2da4c2b89ea788362a1423c48.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kzywidye Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfpudqid Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE