Static task
static1
Behavioral task
behavioral1
Sample
ff00a64cc199c6658dd5b210a2ee3f35ea9e4f97e63523b714e748909a8bdaed.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
ff00a64cc199c6658dd5b210a2ee3f35ea9e4f97e63523b714e748909a8bdaed.exe
Resource
win11-20240802-en
General
-
Target
ff00a64cc199c6658dd5b210a2ee3f35ea9e4f97e63523b714e748909a8bdaed
-
Size
1.8MB
-
MD5
8c7b87eba28c8a55522c452e46b960b2
-
SHA1
a1a3da6f9e3a1793cb621f5fd2b4096c017c584c
-
SHA256
ff00a64cc199c6658dd5b210a2ee3f35ea9e4f97e63523b714e748909a8bdaed
-
SHA512
68b5eab4766be37a6acf605cd057e8b79e6e5784a867b3dfca7e03fe4e93df3c5614ebf07ee37e381115394ba608fc20749932a433b1879c6b1f3888b0bdf40f
-
SSDEEP
49152:NtUFfMS5knpcSrm2AUVXmeedEGipLZwFZpOy/pVjXd1:/4fMS5cc8m1Qmeklc21p7bd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff00a64cc199c6658dd5b210a2ee3f35ea9e4f97e63523b714e748909a8bdaed
Files
-
ff00a64cc199c6658dd5b210a2ee3f35ea9e4f97e63523b714e748909a8bdaed.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fwwdpbsf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cjfjjncc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE