Static task
static1
Behavioral task
behavioral1
Sample
ac980b5cf3bf87c2646c29969aaa25ff25e63f58bad66a4db98e81f98a3cb395.exe
Resource
win10v2004-20240709-en
General
-
Target
ac980b5cf3bf87c2646c29969aaa25ff25e63f58bad66a4db98e81f98a3cb395
-
Size
1.8MB
-
MD5
4c4b3ab5a3585886c61f2196330be874
-
SHA1
31f66e71ac832fff02394525ff6828438a98b902
-
SHA256
ac980b5cf3bf87c2646c29969aaa25ff25e63f58bad66a4db98e81f98a3cb395
-
SHA512
7bf3406cacf76ff374e5eba9125e2d278178fe3867f53dd5ad46c23b4f12b29a631dd0870183e5cad4945270eca090e9b2cb0380d1a8d652a7c46a522bd2423d
-
SSDEEP
49152:M4lyrNmjQfikqd3J32GGiKLq/JhBMgRnAmC0+2AN:M4QeTJGGGiKLqvBmDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac980b5cf3bf87c2646c29969aaa25ff25e63f58bad66a4db98e81f98a3cb395
Files
-
ac980b5cf3bf87c2646c29969aaa25ff25e63f58bad66a4db98e81f98a3cb395.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bpanuddj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wmgwxzym Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE