Static task
static1
Behavioral task
behavioral1
Sample
4a5f9ec72c890b161c70ea74eef1d21e095b74254216412e4702ad082bfdbb85.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
4a5f9ec72c890b161c70ea74eef1d21e095b74254216412e4702ad082bfdbb85.exe
Resource
win11-20240802-en
General
-
Target
4a5f9ec72c890b161c70ea74eef1d21e095b74254216412e4702ad082bfdbb85
-
Size
1.8MB
-
MD5
b50a020743d858be36b3810fca8e2c8c
-
SHA1
647a64036522448e8c95271da8ed7628e4c5557c
-
SHA256
4a5f9ec72c890b161c70ea74eef1d21e095b74254216412e4702ad082bfdbb85
-
SHA512
4facaf5881f02d6baa4498884b96ff4557e6a9e7c25b6f338d11819af7400b376c9025dfc3de36301c19b7e559ee59ebc737a5fb6d1bc30f7338deef1910cbd4
-
SSDEEP
49152:pTS8X9mMmFxhxuhM4RPYq27h9yCl2XVAIfr5YhHzOtIgBwU:p+8XUMmJxZqnU2vlYFzGd+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a5f9ec72c890b161c70ea74eef1d21e095b74254216412e4702ad082bfdbb85
Files
-
4a5f9ec72c890b161c70ea74eef1d21e095b74254216412e4702ad082bfdbb85.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rrdputwu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
trserobk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE