Static task
static1
Behavioral task
behavioral1
Sample
2e96ba96a41327d4dbf748b30406f43aa85cf8177b22765a90cc6f64134f3c7b.exe
Resource
win10v2004-20240802-en
General
-
Target
2e96ba96a41327d4dbf748b30406f43aa85cf8177b22765a90cc6f64134f3c7b
-
Size
1.8MB
-
MD5
a72fd2707b490919368fcd73c6fcf8ae
-
SHA1
0e74ff246e60cfe7a6b22db048167488d7e9bc39
-
SHA256
2e96ba96a41327d4dbf748b30406f43aa85cf8177b22765a90cc6f64134f3c7b
-
SHA512
7359bf6db839c02478bcc8eb60ceead05be63c68c5c5f2b3c8afded0d1ab2b4d24b1c257389cf2e6c15cd43b9251b9f3608fd226d1bb4af5e5c47f75eb71284d
-
SSDEEP
49152:EFj8sfNVJqynQStbQQZfSzOepMeD4t1T1JVJt:EFbfPASmXzQHLVJt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e96ba96a41327d4dbf748b30406f43aa85cf8177b22765a90cc6f64134f3c7b
Files
-
2e96ba96a41327d4dbf748b30406f43aa85cf8177b22765a90cc6f64134f3c7b.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bhcffdcz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mbrreuvt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE