Static task
static1
Behavioral task
behavioral1
Sample
880a4253738525392def3fb412edb8a7809141dd6d5f11636dbec15632a1ad4e.exe
Resource
win10v2004-20240802-en
General
-
Target
880a4253738525392def3fb412edb8a7809141dd6d5f11636dbec15632a1ad4e
-
Size
1.8MB
-
MD5
61a15e345ffcb9fe828fd09ffdf7f2ae
-
SHA1
717bc388370c2c70d0f74997ba9487dddbcbc75f
-
SHA256
880a4253738525392def3fb412edb8a7809141dd6d5f11636dbec15632a1ad4e
-
SHA512
a40e5288a07c3aa86f21dcbdd60baad9ea377cb2fcf4d04ebaea23ed6117676222a64058f41e175ba494365f6ce8aea425fe72a0ba7dba4ade199971aaf0de64
-
SSDEEP
49152:WBJWfHKuEMNP0lS/kc1KfReqSzMW2Q4YtWPcv:WaHUAr8Q3qSgGEk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 880a4253738525392def3fb412edb8a7809141dd6d5f11636dbec15632a1ad4e
Files
-
880a4253738525392def3fb412edb8a7809141dd6d5f11636dbec15632a1ad4e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ohfdjaap Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yeuibblq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE