Static task
static1
Behavioral task
behavioral1
Sample
084b3469c85f0577cf5c06ea7f50abedc25ad7bfc4b406c03f5c9290112946cd.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
084b3469c85f0577cf5c06ea7f50abedc25ad7bfc4b406c03f5c9290112946cd.exe
Resource
win11-20240802-en
General
-
Target
084b3469c85f0577cf5c06ea7f50abedc25ad7bfc4b406c03f5c9290112946cd
-
Size
1.8MB
-
MD5
3bb3306de44d1c4b2b242dcd8849646b
-
SHA1
df6558a21ebbc8ecdfd633ca407e0f0ecadb918a
-
SHA256
084b3469c85f0577cf5c06ea7f50abedc25ad7bfc4b406c03f5c9290112946cd
-
SHA512
bfbfe62b4ac8c8490d24276fe38fa96b8fb7543b89f258cebff9b250bee676dc43c9d27770df8e80110502e4ddab9f31d38dcda44eb375135c0906581b66c7b0
-
SSDEEP
49152:bPf48aWOBYONnYq1I6RcctVb5Lm/clSHTjEb:DVanY+r2ctVdLRUH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084b3469c85f0577cf5c06ea7f50abedc25ad7bfc4b406c03f5c9290112946cd
Files
-
084b3469c85f0577cf5c06ea7f50abedc25ad7bfc4b406c03f5c9290112946cd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
clxcmasb Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ainndqgz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE