Static task
static1
Behavioral task
behavioral1
Sample
eae0d84af32d23a0fb57fe9e0b3ab4dc6ca181d8da265dcc7bcd2baea45ee8b8.exe
Resource
win10v2004-20240802-en
General
-
Target
eae0d84af32d23a0fb57fe9e0b3ab4dc6ca181d8da265dcc7bcd2baea45ee8b8
-
Size
1.9MB
-
MD5
ef44dd60eafd2c0f61c43837f15a20f4
-
SHA1
207a69c81b183c01a2903ab4802580d252f3d91e
-
SHA256
eae0d84af32d23a0fb57fe9e0b3ab4dc6ca181d8da265dcc7bcd2baea45ee8b8
-
SHA512
d6e8448fcd06253aa9a1f915eb8fb0128e4d569fbfe3496ad1f5560dfdd1c780f33c3c2cd372ac17856b46f9cc930ff8fa65b17f9e7891be03a1eeef8daea41a
-
SSDEEP
49152:M7Cw4O87JwJ+nQ5UYII7X6ssrqmZR3zsQj0jh/DRos:Mo5VlI7X6pqmZydF7C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eae0d84af32d23a0fb57fe9e0b3ab4dc6ca181d8da265dcc7bcd2baea45ee8b8
Files
-
eae0d84af32d23a0fb57fe9e0b3ab4dc6ca181d8da265dcc7bcd2baea45ee8b8.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qrywmzpw Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sgpcixvh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE