Static task
static1
Behavioral task
behavioral1
Sample
38d9d9a714d10c0d61e81782cf54c376ec3a59bf9cde40357f224479c0469dd3.exe
Resource
win10v2004-20240802-en
General
-
Target
38d9d9a714d10c0d61e81782cf54c376ec3a59bf9cde40357f224479c0469dd3
-
Size
1.9MB
-
MD5
cd585e4bd01b7452f650fe74e1b54ffa
-
SHA1
e7ed3c3a7cc8dbf4f3490deedc566ed374764878
-
SHA256
38d9d9a714d10c0d61e81782cf54c376ec3a59bf9cde40357f224479c0469dd3
-
SHA512
73170618f7d221845e2b62fa5a51b88cf59e66711cd84cb61347df4446ceefd4c5adf138700e3ad4993dfc363d517650ef93fa7a9fe427081bff7c36dfdc93f1
-
SSDEEP
49152:Frzik4VJ5QRN3OoqMrQwpm5Bpc0XUha3vE:Fvb4rtwQjBUhW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38d9d9a714d10c0d61e81782cf54c376ec3a59bf9cde40357f224479c0469dd3
Files
-
38d9d9a714d10c0d61e81782cf54c376ec3a59bf9cde40357f224479c0469dd3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hwklbsue Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdgpzaxf Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE