Static task
static1
Behavioral task
behavioral1
Sample
ead935f1295b51a63a66d2978ad3c185776e72ee57191694f4b6dcdba2db80e6.exe
Resource
win10v2004-20240802-en
General
-
Target
ead935f1295b51a63a66d2978ad3c185776e72ee57191694f4b6dcdba2db80e6
-
Size
1.8MB
-
MD5
fc387dbd80a4d7964d5f69b212c44de3
-
SHA1
01ce02d745bcd1707c13b2c81ba1b7883c9e4c44
-
SHA256
ead935f1295b51a63a66d2978ad3c185776e72ee57191694f4b6dcdba2db80e6
-
SHA512
81b5eabfd628785152e0e3c8c85654c82994b473dd62a4262d589c8ff07015ec80a2b0871e55fedc5218ba997ef58fc6d02df9b6bfd74df8d7a1f8f7b95a2fdc
-
SSDEEP
49152:77lovReDFIR+smsw1LyHfx/9pFCrsbkz5XOGzx:779RIR+rsw1OZ1GAC5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead935f1295b51a63a66d2978ad3c185776e72ee57191694f4b6dcdba2db80e6
Files
-
ead935f1295b51a63a66d2978ad3c185776e72ee57191694f4b6dcdba2db80e6.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 79KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tideoaqd Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aqxvfbor Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE