Static task
static1
Behavioral task
behavioral1
Sample
48a05fe27e92d9169c2d3c5339a85f4aaf182e2da4efdcaf490f68dbb21b7b98.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48a05fe27e92d9169c2d3c5339a85f4aaf182e2da4efdcaf490f68dbb21b7b98.exe
Resource
win10-20240404-en
General
-
Target
48a05fe27e92d9169c2d3c5339a85f4aaf182e2da4efdcaf490f68dbb21b7b98
-
Size
1.8MB
-
MD5
ec91783f8f3164443bf49d77cb1961e3
-
SHA1
05561a1ac1f84cae8c3324beed38247af12022fb
-
SHA256
48a05fe27e92d9169c2d3c5339a85f4aaf182e2da4efdcaf490f68dbb21b7b98
-
SHA512
1e2b4886d663b0676567214e2dfd7633b1e5135a4e245f098362d7764c5f43fbba42d325c68c75943dc32d41f141dd3df7f4443c8ed663265ab7ca55253254ac
-
SSDEEP
49152:T6QZ+BjzwIeUrQ1nVhjawT2y+4L0nMg0t:OJN1edxVhjag2xfnW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48a05fe27e92d9169c2d3c5339a85f4aaf182e2da4efdcaf490f68dbb21b7b98
Files
-
48a05fe27e92d9169c2d3c5339a85f4aaf182e2da4efdcaf490f68dbb21b7b98.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggzvvcya Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xvitsxgv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE