Static task
static1
Behavioral task
behavioral1
Sample
ffadd16774cf9839e2dad95da865777b13b63baefe5c30636cd2481dda576483.exe
Resource
win10v2004-20240802-en
General
-
Target
ffadd16774cf9839e2dad95da865777b13b63baefe5c30636cd2481dda576483
-
Size
9.8MB
-
MD5
2a8ffc8a8c766d39401bba6c66d98011
-
SHA1
0b53b54da06e8a7e74fbeac77dd770970336dd7a
-
SHA256
ffadd16774cf9839e2dad95da865777b13b63baefe5c30636cd2481dda576483
-
SHA512
74705f6a263b2c1a2b902fb43712a7fdd2fa620c7ad714e6cbfd7b67682b2c2e9c0681a3f29ac028e22dd55f137541a02f70ab1e9afe520b61a6051e4e4f2d43
-
SSDEEP
49152:kqAbPAywdirl/VeOXk7hegGur2kQm7NW12R9DPId5STm7heny0iMeuKSP:kqAb3quchDCYNW12fPId5STmenZyu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffadd16774cf9839e2dad95da865777b13b63baefe5c30636cd2481dda576483
Files
-
ffadd16774cf9839e2dad95da865777b13b63baefe5c30636cd2481dda576483.exe windows:6 windows x86 arch:x86
48d4a6a3111a18b082fa3638b1568f64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6": Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.?;e Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n-. Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ