Static task
static1
Behavioral task
behavioral1
Sample
f36637e98b249981f8b88c0dcdeb19cafe8fe5f262d83038990caa7e08141549.exe
Resource
win10v2004-20240802-en
General
-
Target
f36637e98b249981f8b88c0dcdeb19cafe8fe5f262d83038990caa7e08141549
-
Size
1.7MB
-
MD5
09c44ee055df05f0dc2d31f073eb3abc
-
SHA1
8ac5dd0887560cb9fb65af57668177211b0d768a
-
SHA256
f36637e98b249981f8b88c0dcdeb19cafe8fe5f262d83038990caa7e08141549
-
SHA512
88affeee3b02ba54988ac87d6126ccd6ac29b01eb9ca8a5a8aeb26d34c9b6e6706d207cb65b521b75870faccc7701e6a17284aa6ca6d281792cb3aa8475f5832
-
SSDEEP
24576:y3wq/fO1LlfRQBy8LoEtOGxeQDD0+xaEdZnptDnX4e7Ug1PLjg/SM5V/vs:yjnO1LfAy8LYieMfx5ptjX4egALjwSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f36637e98b249981f8b88c0dcdeb19cafe8fe5f262d83038990caa7e08141549
Files
-
f36637e98b249981f8b88c0dcdeb19cafe8fe5f262d83038990caa7e08141549.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 79KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aaaakjlt Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nswwjcxy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE