Static task
static1
Behavioral task
behavioral1
Sample
0c097aff63d3d94fa889b3f9bab66aa741323acfe7f41efce7657a768ea08e67.exe
Resource
win10v2004-20240709-en
General
-
Target
0c097aff63d3d94fa889b3f9bab66aa741323acfe7f41efce7657a768ea08e67
-
Size
1.8MB
-
MD5
1cd591e5368f62b0bf17ea264e1a1610
-
SHA1
656df2cce84706b0658bee3d7c48f86afad7df8c
-
SHA256
0c097aff63d3d94fa889b3f9bab66aa741323acfe7f41efce7657a768ea08e67
-
SHA512
8512b63a8e906ed18935d1c429815267fac264362beff5645818a2a026771db0f878feba5551ae6d4660c0336139465d9f023f4cc2b920b7b7cc176fddddbb2b
-
SSDEEP
49152:j3SutHeFLtcCKkZlR1351iUrO5rMETObK21RH:WutHehKkZlvJ1dOJMpl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c097aff63d3d94fa889b3f9bab66aa741323acfe7f41efce7657a768ea08e67
Files
-
0c097aff63d3d94fa889b3f9bab66aa741323acfe7f41efce7657a768ea08e67.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wrttmzum Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qxxvqdpq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE