Static task
static1
Behavioral task
behavioral1
Sample
3fe86f16a2d125df9cbc70c53e29395fcbbfbf93830a4706cef8a67fbdb93232.exe
Resource
win10v2004-20240730-en
General
-
Target
3fe86f16a2d125df9cbc70c53e29395fcbbfbf93830a4706cef8a67fbdb93232
-
Size
1.8MB
-
MD5
09e01863cce03edfae832f8919a5333f
-
SHA1
d0b8e0d222dce89cc49a8bfab16485155a51fd55
-
SHA256
3fe86f16a2d125df9cbc70c53e29395fcbbfbf93830a4706cef8a67fbdb93232
-
SHA512
2edb30a7b1969fb4122a11165ae6d696bcc79f277255cd25f492d2e5c40cda83be12b0f2d066a8027cbe7bfb14c80cf912c4898f3431e30610c4439cbc7a3566
-
SSDEEP
49152:iWT505B8VxdCAbn9oVi5rOgaTQogVWBaC38Jefg:iq5teAbneVS6g0yWBaC3we
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe86f16a2d125df9cbc70c53e29395fcbbfbf93830a4706cef8a67fbdb93232
Files
-
3fe86f16a2d125df9cbc70c53e29395fcbbfbf93830a4706cef8a67fbdb93232.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zouwvsnq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rxsxynnv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE