Static task
static1
Behavioral task
behavioral1
Sample
ba61747e77322718715fb1f01ad332580046b9ed0092a64877c2ae62e90d5c9e.exe
Resource
win10v2004-20240802-en
General
-
Target
ba61747e77322718715fb1f01ad332580046b9ed0092a64877c2ae62e90d5c9e
-
Size
1.8MB
-
MD5
4141269cc71160518d53bd4232546645
-
SHA1
f6cab15b6c4cba08991ad7ef9c0143ef62bc8992
-
SHA256
ba61747e77322718715fb1f01ad332580046b9ed0092a64877c2ae62e90d5c9e
-
SHA512
3f18ccaff54ea45bc560bc33db9ae00051423f22835f366c9991e8459157d4d22c2f33d090164f589b7e8f42648a624e799e3165faf7550448f85632b876589a
-
SSDEEP
49152:wsCoAvp/tZTkFQCSEIYDtIzJcqSngDBAZPbb:wsNsp/tyFQVh8edblsPbb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ba61747e77322718715fb1f01ad332580046b9ed0092a64877c2ae62e90d5c9e
Files
-
ba61747e77322718715fb1f01ad332580046b9ed0092a64877c2ae62e90d5c9e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mcgzkoux Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdhmwpth Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE