Static task
static1
Behavioral task
behavioral1
Sample
b8c50f164f29dddfec85b4157842f4a6377cd2633ec72f8bdbd926a7723c4c10.exe
Resource
win10v2004-20240709-en
General
-
Target
b8c50f164f29dddfec85b4157842f4a6377cd2633ec72f8bdbd926a7723c4c10
-
Size
1.8MB
-
MD5
430ac1f78dc47a12bba2b6970e940432
-
SHA1
51b48f40df8228cc0c2b2ca3616a95c221e89f32
-
SHA256
b8c50f164f29dddfec85b4157842f4a6377cd2633ec72f8bdbd926a7723c4c10
-
SHA512
eaa07d25967dd4cb59282db434a8224eed5a225e9262bdb96253d08d61ca6860fd2cf894b3b768bdd44ff0d1332076783b36063ed8a2019a065e8df352f9f5b8
-
SSDEEP
49152:hK8x1FU1Vq/GN0vs/ZLnEzjHquxYhKojFJfsusnPKxjAGBCalD:ICy1V/Nf/u3nq3snPKmGBL5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8c50f164f29dddfec85b4157842f4a6377cd2633ec72f8bdbd926a7723c4c10
Files
-
b8c50f164f29dddfec85b4157842f4a6377cd2633ec72f8bdbd926a7723c4c10.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bqcdryqt Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lswysrzc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE