Static task
static1
Behavioral task
behavioral1
Sample
a335c94809326a611bca086974fb68b4e595af572b05adf1fc277f83d7c7a0ce.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a335c94809326a611bca086974fb68b4e595af572b05adf1fc277f83d7c7a0ce.exe
Resource
win10-20240404-en
General
-
Target
a335c94809326a611bca086974fb68b4e595af572b05adf1fc277f83d7c7a0ce
-
Size
1.8MB
-
MD5
46d031c71e21880a7c817a23b2b60eaf
-
SHA1
36de7da042335b520865321f7fe2710ca2fdedfb
-
SHA256
a335c94809326a611bca086974fb68b4e595af572b05adf1fc277f83d7c7a0ce
-
SHA512
1cf648972a26e5337314a96a96018a42010e6f6dc1958eb07cfff35b49ae220821ea5200f2f23dd8c59308558fdf4021bf6b0b7dc010462fe451ce5f25665f12
-
SSDEEP
49152:lrbFDosDfW4EOgDdTMlynU8bRHbSwhVQuAhG:lPFDrT7oelZYQwUG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a335c94809326a611bca086974fb68b4e595af572b05adf1fc277f83d7c7a0ce
Files
-
a335c94809326a611bca086974fb68b4e595af572b05adf1fc277f83d7c7a0ce.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lfbtvxjv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkwazakm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE