Static task
static1
Behavioral task
behavioral1
Sample
4e5a7df168270d5bfd2491582da2a10c921cf04b1b5daed922af9c8bce20f4ce.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
4e5a7df168270d5bfd2491582da2a10c921cf04b1b5daed922af9c8bce20f4ce.exe
Resource
win11-20240802-en
General
-
Target
4e5a7df168270d5bfd2491582da2a10c921cf04b1b5daed922af9c8bce20f4ce
-
Size
1.8MB
-
MD5
83847cf6a192b9983d7a07be74cdab7b
-
SHA1
5b8a52ccfb7c89ebaa8ff909a024e10a4eb680c6
-
SHA256
4e5a7df168270d5bfd2491582da2a10c921cf04b1b5daed922af9c8bce20f4ce
-
SHA512
152defdb7bd96cb84ebb22a9048ed0a4e84425572005246fa4e1e9576437940a2fe183e9983a0f08814f12ef563a8f2949f364bcabadf5251db255554cf84769
-
SSDEEP
49152:ExRFPlGjyvW1YqvRhXBERh7qzxwALvCODAE7/JvpmbFHiM4:ElPlGoqvnXu7qtwGCC3vcFHiM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e5a7df168270d5bfd2491582da2a10c921cf04b1b5daed922af9c8bce20f4ce
Files
-
4e5a7df168270d5bfd2491582da2a10c921cf04b1b5daed922af9c8bce20f4ce.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zghbmtmp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ekzcdlcs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE