Static task
static1
Behavioral task
behavioral1
Sample
b0a8c250928967e2407142d1cbe65369e141380849f8761405fd9992009123fa.exe
Resource
win10v2004-20240709-en
General
-
Target
b0a8c250928967e2407142d1cbe65369e141380849f8761405fd9992009123fa
-
Size
1.8MB
-
MD5
2dff402b11d60b8d635038afcb1edd60
-
SHA1
c62452c7fec9c0d9e2fc85a1682cf451698a8e2a
-
SHA256
b0a8c250928967e2407142d1cbe65369e141380849f8761405fd9992009123fa
-
SHA512
0cfc5fe4924dbd0b86999f6da23bbe5edfb8f4d404b6c33bed029c86a7faf21fbd043b8a497508245cf99ad1e49f555bee573b21ab40a4948d44ad959f437690
-
SSDEEP
49152:Mzkc23o/6iaEjDalWdm9y/pJIwxmO+37huq:gkdziDmf8Hxm93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0a8c250928967e2407142d1cbe65369e141380849f8761405fd9992009123fa
Files
-
b0a8c250928967e2407142d1cbe65369e141380849f8761405fd9992009123fa.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iytkqqmf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jesnvumu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE