Static task
static1
Behavioral task
behavioral1
Sample
68250f8f265452908ab5eb26ee23ae9f896be08f5259c661b4791fe405f8bc19N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68250f8f265452908ab5eb26ee23ae9f896be08f5259c661b4791fe405f8bc19N.exe
Resource
win10v2004-20240910-en
General
-
Target
68250f8f265452908ab5eb26ee23ae9f896be08f5259c661b4791fe405f8bc19N
-
Size
1.8MB
-
MD5
9d7876956f291da31847b03f9343a060
-
SHA1
4aad4cc9fd785b6edbd2f63e37e48a36ca625d14
-
SHA256
68250f8f265452908ab5eb26ee23ae9f896be08f5259c661b4791fe405f8bc19
-
SHA512
2a32cedc29fea8769f374c5c50cf6591a60b9fee9907847e7ecd8dd9a6435a0af5a7dd6c2f46b591723d7a0c61d16f472316a0299be6f74d8773fa8445baf927
-
SSDEEP
49152:xiSQS80VJExf4kgajUrkrY++vMf0liqPpKj:xv8SJElMwUArY1AqPa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68250f8f265452908ab5eb26ee23ae9f896be08f5259c661b4791fe405f8bc19N
Files
-
68250f8f265452908ab5eb26ee23ae9f896be08f5259c661b4791fe405f8bc19N.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cutghzuu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fymiojpd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE