Static task
static1
Behavioral task
behavioral1
Sample
067ff229884c58ebf87d7519a5cc37ba5d23a14ac02edd77465399f3b98a39e2.exe
Resource
win10v2004-20240709-en
General
-
Target
067ff229884c58ebf87d7519a5cc37ba5d23a14ac02edd77465399f3b98a39e2
-
Size
1.8MB
-
MD5
1f92795b00fc3b7291b9440c2eb696c0
-
SHA1
a39390a9b614c9d817d832a84c496c42a0198036
-
SHA256
067ff229884c58ebf87d7519a5cc37ba5d23a14ac02edd77465399f3b98a39e2
-
SHA512
ab546f5c4fc97c077f1573fbdb1c6a3d9954805d240269835dca4ad5e7d7dd87062183d4fe1486a83d31e7936508921a49ebf67546b86976ed5596532087a472
-
SSDEEP
49152:L/mnbR11PZlVADzNtqVf/Mqtkxj8LzFQOmziS/T:LAR1RZ8JtqVfuxAzuOmziSb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 067ff229884c58ebf87d7519a5cc37ba5d23a14ac02edd77465399f3b98a39e2
Files
-
067ff229884c58ebf87d7519a5cc37ba5d23a14ac02edd77465399f3b98a39e2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xartwnkr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
umhbbxpb Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE