Static task
static1
Behavioral task
behavioral1
Sample
781528a47d833ef963fd1d0200927ce8bc1384027ca71443c1b8865c7458dd0d.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
781528a47d833ef963fd1d0200927ce8bc1384027ca71443c1b8865c7458dd0d.exe
Resource
win11-20240802-en
General
-
Target
781528a47d833ef963fd1d0200927ce8bc1384027ca71443c1b8865c7458dd0d
-
Size
1.8MB
-
MD5
7517a53a4d609ada6aae322c0580db2c
-
SHA1
43f6ab845cd6a95ab08a457a61de4cbcf288a127
-
SHA256
781528a47d833ef963fd1d0200927ce8bc1384027ca71443c1b8865c7458dd0d
-
SHA512
0a1aa1f78e673d9e344b9c81e97a260baa2731daf11204f90ac9e31372b3134bb6d279c6cce6793e7aa2cc004f8fe4e9101835e185ddfcde09c7725e17d358b2
-
SSDEEP
49152:8hTGbIScU2tBFB0ZJhBBhJx8cs0BGESBvq5i:UTGPD8WZJB/x8cs0BGVBvq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 781528a47d833ef963fd1d0200927ce8bc1384027ca71443c1b8865c7458dd0d
Files
-
781528a47d833ef963fd1d0200927ce8bc1384027ca71443c1b8865c7458dd0d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cwueyjoa Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kuhufeox Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE