Static task
static1
Behavioral task
behavioral1
Sample
0a97f8ee514c0550d924bc80c0b883d12409c5a1a5ac72fb0e0fb6cf9beb9a8c.exe
Resource
win10v2004-20240709-en
General
-
Target
0a97f8ee514c0550d924bc80c0b883d12409c5a1a5ac72fb0e0fb6cf9beb9a8c
-
Size
1.8MB
-
MD5
5d850ac96ffc2351953dd61fbe88dad2
-
SHA1
e7a4db7be5dc8585664aec445f33105fd1a2e2cf
-
SHA256
0a97f8ee514c0550d924bc80c0b883d12409c5a1a5ac72fb0e0fb6cf9beb9a8c
-
SHA512
0891dcba3a33c55bf60ee21349b7062e3f01e2ef6b7970ce809daf7c3e5c78d580fdfcb6c2789935de270f38c033f4ef47d2e1c409bdff8fe5fb9b7d4a0a2a75
-
SSDEEP
49152:The8Ie9sIH6Mjc3sTa3eLt5uQIA4lS6tye5y4mf2sn9cKW8Ua:8QdaMI3sTa3eh7Uxye84m+sNU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a97f8ee514c0550d924bc80c0b883d12409c5a1a5ac72fb0e0fb6cf9beb9a8c
Files
-
0a97f8ee514c0550d924bc80c0b883d12409c5a1a5ac72fb0e0fb6cf9beb9a8c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uawopkvr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xricgcgd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE