Static task
static1
Behavioral task
behavioral1
Sample
F8DA3C48BE96.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
F8DA3C48BE96.exe
Resource
win10v2004-20240802-en
General
-
Target
F8DA3C48BE96.exe
-
Size
2.1MB
-
MD5
1dbf4a8467163f45008047c43a782be0
-
SHA1
8d795660e1162ce4ee3ad01eb75e28aa72a3357b
-
SHA256
26a9f1460d39efc3c1a55187e119982da6719692cb83d2c30bf0e6dd8fb70670
-
SHA512
8e0a4b624fba8edce274cbb4b5f47a3ebd40bcbbb56b1d7f579950da787479360ac35b700f728c7ceae9e62e0e16ffdff03b3541eb08a1dc24ad3109b14860a0
-
SSDEEP
49152:ijCsZVi6Le0QtM8aE2erNQ7QlPC170zGpT37kB6q:ijFHp668TEZkUT66
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource F8DA3C48BE96.exe
Files
-
F8DA3C48BE96.exe.exe windows:6 windows x64 arch:x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 53KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ubydufru Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wbxzhjma Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ