Static task
static1
Behavioral task
behavioral1
Sample
2fd4d0fd0c270ef26283d8883510a572ea39d7a2078bba9fd4a044c72347df8d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fd4d0fd0c270ef26283d8883510a572ea39d7a2078bba9fd4a044c72347df8d.exe
Resource
win10v2004-20240802-en
General
-
Target
2fd4d0fd0c270ef26283d8883510a572ea39d7a2078bba9fd4a044c72347df8d
-
Size
1.8MB
-
MD5
647e592c1b0f07ecd0eae723bf3c639b
-
SHA1
4b17b463f8a9185d70fc84d93e8760ea602f0e0b
-
SHA256
2fd4d0fd0c270ef26283d8883510a572ea39d7a2078bba9fd4a044c72347df8d
-
SHA512
2b5836a0dbf4121522df2f113fdc13c8f75817a97c246e8da8b34b0c92fb2cd60e65a869dfcb07c8eba7db3f76a624c662878a7e5592a9c25136844188b0f303
-
SSDEEP
49152:eKvOB8PQoSwll15XeWj1bsXM10afeuSnaKgjAb/G4:eTB8DzHYuJf+g2G4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fd4d0fd0c270ef26283d8883510a572ea39d7a2078bba9fd4a044c72347df8d
Files
-
2fd4d0fd0c270ef26283d8883510a572ea39d7a2078bba9fd4a044c72347df8d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nmqkerxc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zsbclnip Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE