Static task
static1
Behavioral task
behavioral1
Sample
osVlKE7EeuqgZih.exe
Resource
win10v2004-20241007-es
General
-
Target
osVlKE7EeuqgZih.exe
-
Size
15.0MB
-
MD5
f5399866e6358f5aeeb3c44b7d64588e
-
SHA1
c880f8fa4c5cf84058333cbc311cef4f5021c827
-
SHA256
462dcc3e64c7a5019a3cdd18569e5f89defe6a5f1065baed7bb80db16e51e178
-
SHA512
009130acea18bdeb6339648670f149bf20f8fc0f396018b8c5fbc5207d9a74244e51dedae2158b6b84a4ea0936be8f8c60b7c0e283beb268ac1514732e5fd599
-
SSDEEP
393216:+pFdgF70CVH2bkR5wmnVUsA4GV9jscDoI7sbYKf:mFeF7d2OwE9AL2cZ4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource osVlKE7EeuqgZih.exe
Files
-
osVlKE7EeuqgZih.exe.exe windows:6 windows x64 arch:x64
2085616a53b1abec2b86a1cc1ca1f010
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
connect
ntdll
RtlInitUnicodeString
version
GetFileVersionInfoSizeA
ole32
CoSetProxyBlanket
oleaut32
VariantClear
wldap32
ord46
normaliz
IdnToAscii
crypt32
CertCloseStore
kernel32
TerminateProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
RegOpenKeyW
Sections
.text Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kt] Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.77h Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6'w Size: 15.0MB - Virtual size: 15.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ