Static task
static1
Behavioral task
behavioral1
Sample
de50aee10c15bb700e0d4279e3343c4db62fe445b1e0967921bf029589818126.exe
Resource
win10v2004-20240802-en
General
-
Target
de50aee10c15bb700e0d4279e3343c4db62fe445b1e0967921bf029589818126
-
Size
1.8MB
-
MD5
90d583967fc1688bb51fe514b980114b
-
SHA1
4a05ad7ddba290f565767b48ec544d378ca25bf6
-
SHA256
de50aee10c15bb700e0d4279e3343c4db62fe445b1e0967921bf029589818126
-
SHA512
a0b2b6ba1e544eefff57c8c47c00abe3407b49c60f3ca755075ce3ade4cd65efb4ab3a1497ee906407bf813442285e4d8698be3e0fd8dac49a93b1326c3da60b
-
SSDEEP
49152:NnE0qcG75KKyf9JjHgyHoGnuOoLDgDYPY:WrcGoKyfTUyIGu13mcY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de50aee10c15bb700e0d4279e3343c4db62fe445b1e0967921bf029589818126
Files
-
de50aee10c15bb700e0d4279e3343c4db62fe445b1e0967921bf029589818126.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fpyqwbgy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gsrzjpgx Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE