Static task
static1
Behavioral task
behavioral1
Sample
9e4befc297323f30b44ca11cc3245b67b89d94674e6bccf1ac0fa5dbe4ef6f84.exe
Resource
win10v2004-20240709-en
General
-
Target
9e4befc297323f30b44ca11cc3245b67b89d94674e6bccf1ac0fa5dbe4ef6f84
-
Size
1.8MB
-
MD5
6c46bb423a1222ddd103b51288b87d17
-
SHA1
963e883ab9865ca2906be29d19109308d33d86c9
-
SHA256
9e4befc297323f30b44ca11cc3245b67b89d94674e6bccf1ac0fa5dbe4ef6f84
-
SHA512
f230730102cbe7bbc85634433827c131b2d0c2ea1a992f9bcbc7591e7303a788fbf435ad0b5c289fbe8ca3b2f6370e65984cd49e562f28b8356b8e3ae228d456
-
SSDEEP
49152:seASNgyUKwiw1U2Ad0NfO7MXGvRVX70PlP5dYuTUx56mm:spSa343dWO76GvRVQ9PjT+56
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e4befc297323f30b44ca11cc3245b67b89d94674e6bccf1ac0fa5dbe4ef6f84
Files
-
9e4befc297323f30b44ca11cc3245b67b89d94674e6bccf1ac0fa5dbe4ef6f84.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
icgzdpvi Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gkvaskik Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE