Static task
static1
Behavioral task
behavioral1
Sample
0dbb24ed6c315bd6369b363a7dba4d3484a5f86ac0afb5013fced30e2bf5abab.exe
Resource
win10v2004-20240709-en
General
-
Target
0dbb24ed6c315bd6369b363a7dba4d3484a5f86ac0afb5013fced30e2bf5abab
-
Size
1.8MB
-
MD5
d995bba5be2eb4ed2701a82409ca9c3d
-
SHA1
f0e4be8284b4f31e19d2baf39cd02b4338b33d42
-
SHA256
0dbb24ed6c315bd6369b363a7dba4d3484a5f86ac0afb5013fced30e2bf5abab
-
SHA512
876e086c3fd685f27622421e57fef3af896987b20ab95ccdee2433be14fb00a0f933a583f92faf957548a0fa6d5aedeea9582cdb5f9c3651ca215c020e1bd204
-
SSDEEP
49152:RkNwh9pPi+JO86c92cLQKaSjQaBO1m9TKEz+MDRnjiJ:R/h3BJ3dYy+A/RZVDRu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dbb24ed6c315bd6369b363a7dba4d3484a5f86ac0afb5013fced30e2bf5abab
Files
-
0dbb24ed6c315bd6369b363a7dba4d3484a5f86ac0afb5013fced30e2bf5abab.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
descnels Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
otsxttek Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE