Static task
static1
Behavioral task
behavioral1
Sample
8634f8e6e3a1f25bcc135fac966fc3711f3861c7b21ef04f2eafa7654dc36289.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8634f8e6e3a1f25bcc135fac966fc3711f3861c7b21ef04f2eafa7654dc36289.exe
Resource
win10v2004-20240709-en
General
-
Target
8634f8e6e3a1f25bcc135fac966fc3711f3861c7b21ef04f2eafa7654dc36289
-
Size
3.3MB
-
MD5
2067a8aa3d5bc8443895e4b72a6a1455
-
SHA1
06b67eafcafe74cd659534fea2cb2f0ec7aa8cab
-
SHA256
8634f8e6e3a1f25bcc135fac966fc3711f3861c7b21ef04f2eafa7654dc36289
-
SHA512
007a01a47ff742c1da4acc544039aa66c7d952b43be36ea52cddf96f30860bdc6e745c29a85e48fdccb346efb6dc0f1b2ecd1246defe4647e19042829dfd0617
-
SSDEEP
49152:F9mya6+gIyJazelp3ILWyLmVtrCYCZsFoJqiIF55c+mMrivrfKD+kP8sgUXu79/7:PB+ghTp4Pm6qjw+d+vrCDasgp6HGl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8634f8e6e3a1f25bcc135fac966fc3711f3861c7b21ef04f2eafa7654dc36289
Files
-
8634f8e6e3a1f25bcc135fac966fc3711f3861c7b21ef04f2eafa7654dc36289.exe windows:6 windows x64 arch:x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 813KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vprtjbwn Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
laaxbiya Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ