Static task
static1
Behavioral task
behavioral1
Sample
f46d6970de2c1acfcea3033bc22eda9129d96873d5f76564ea457adde3076a90.exe
Resource
win10v2004-20240709-en
General
-
Target
f46d6970de2c1acfcea3033bc22eda9129d96873d5f76564ea457adde3076a90
-
Size
1.8MB
-
MD5
31798d362834042ac86dd199c75f666d
-
SHA1
533a5fbfb40eafcb0a80dd32997ebf946f9696a8
-
SHA256
f46d6970de2c1acfcea3033bc22eda9129d96873d5f76564ea457adde3076a90
-
SHA512
ba618d70e9e5ecc9b8569d1f44a366ee4e3477fd293982bfadf3fc68b32a5ab18e3e5f8d75a1906e6f6d6e4fbe105b2d11cca4c56f07805dce6c9dda247d1e83
-
SSDEEP
49152:4Q+ECsucpZCtSFsKqXAnojdffiDtr12DB0:4QLNCtSxojdffiJ12DG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f46d6970de2c1acfcea3033bc22eda9129d96873d5f76564ea457adde3076a90
Files
-
f46d6970de2c1acfcea3033bc22eda9129d96873d5f76564ea457adde3076a90.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jbiqzsuf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
npfpgrja Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE