Static task
static1
Behavioral task
behavioral1
Sample
1e441428ac700f6827f63f2321e9102c71103dfa6387abb9a94714173ef71907.exe
Resource
win10v2004-20240704-en
General
-
Target
1e441428ac700f6827f63f2321e9102c71103dfa6387abb9a94714173ef71907
-
Size
1.8MB
-
MD5
b160f9359d9525e6ea3d7c3bca3ccd1e
-
SHA1
562711e4cce339af53602b395725be0e970235da
-
SHA256
1e441428ac700f6827f63f2321e9102c71103dfa6387abb9a94714173ef71907
-
SHA512
a93744fdb2219e556092c3990b5b81fde2e4b0110a5d5dff9027d6132d4972871a9f918040a623edefe806e2c312cc40e81aa2736ed5b3684f489c2662b42bd2
-
SSDEEP
49152:jURsoeB2k11dZCHiibAbBjN45A37sZDot:jj1/Yii0bk5E72I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e441428ac700f6827f63f2321e9102c71103dfa6387abb9a94714173ef71907
Files
-
1e441428ac700f6827f63f2321e9102c71103dfa6387abb9a94714173ef71907.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ueukpmtn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsabmnsf Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE