Static task
static1
Behavioral task
behavioral1
Sample
454f65d0741e515c03e0196b9b8fdfb11fb12c1c39717bd277d856d94dcf7db3.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
454f65d0741e515c03e0196b9b8fdfb11fb12c1c39717bd277d856d94dcf7db3.exe
Resource
win10-20240404-en
General
-
Target
454f65d0741e515c03e0196b9b8fdfb11fb12c1c39717bd277d856d94dcf7db3
-
Size
1.8MB
-
MD5
876a6feeffb71e95f7217eaa05c585eb
-
SHA1
2e5a5e4709482cdbf42bc8173bef6ec25feac600
-
SHA256
454f65d0741e515c03e0196b9b8fdfb11fb12c1c39717bd277d856d94dcf7db3
-
SHA512
bbaeef6123efe1361ccac311790c2eec3958f145b1818bc280b9f0fda27f9fa87b5ee74db1e9d6bc0e7aaf75d852729fe8f1afcad70fe527764daaab432d6ab8
-
SSDEEP
24576:Rez4TNxWuU/dZlLTOGiyl1Iz1sGVbRKCN1jT0DUh+dIF9J52dzrf5vtO5Hn/W/9l:K4xJK5O218VNKCqI2dfOxQ91aCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 454f65d0741e515c03e0196b9b8fdfb11fb12c1c39717bd277d856d94dcf7db3
Files
-
454f65d0741e515c03e0196b9b8fdfb11fb12c1c39717bd277d856d94dcf7db3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xtfkmvik Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oevmgevi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE