Static task
static1
Behavioral task
behavioral1
Sample
1819f1a52131d1ba54a74cfbe5f466379c7ced67b261fb923f321c998b7bb8bd.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1819f1a52131d1ba54a74cfbe5f466379c7ced67b261fb923f321c998b7bb8bd.exe
Resource
win10v2004-20240802-en
General
-
Target
1819f1a52131d1ba54a74cfbe5f466379c7ced67b261fb923f321c998b7bb8bd
-
Size
6.3MB
-
MD5
4d88af54b82e5eb247deb942d1b3e7c2
-
SHA1
ffeec98e00ea1a1da64897acb5c146c20ead0c1e
-
SHA256
1819f1a52131d1ba54a74cfbe5f466379c7ced67b261fb923f321c998b7bb8bd
-
SHA512
d858f41e17d966fdc9e3a20e043b64692a750709be824f997dc622c09c64c745a357b1f49d5a392c582708e4178a7909c6c8907e8518e50e401762273e7d930c
-
SSDEEP
98304:ihPxx0CES35iraAd29o4SPsCMtBqDqJMh2repO8qnXCjpRhxnWWzQYvj+0tMtgTr:ihcs+UojPGtADqrisopvFvz1+0tMtGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1819f1a52131d1ba54a74cfbe5f466379c7ced67b261fb923f321c998b7bb8bd
Files
-
1819f1a52131d1ba54a74cfbe5f466379c7ced67b261fb923f321c998b7bb8bd.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.2MB - Virtual size: 23.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqyliucy Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xyvadnex Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE