Static task
static1
Behavioral task
behavioral1
Sample
066cf9b2d9edde6a63192b3c513944a4b67a5f36cff40bead11074e22d7737b4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
066cf9b2d9edde6a63192b3c513944a4b67a5f36cff40bead11074e22d7737b4.exe
Resource
win10v2004-20241007-en
General
-
Target
066cf9b2d9edde6a63192b3c513944a4b67a5f36cff40bead11074e22d7737b4
-
Size
1.9MB
-
MD5
2a34cc0bdb7a4af298975cd47989775e
-
SHA1
0695436b200062af7b68623051d24aac43415b6d
-
SHA256
066cf9b2d9edde6a63192b3c513944a4b67a5f36cff40bead11074e22d7737b4
-
SHA512
3a656e6b234f733eab6321385d82943c251893e7ab4c0ac0245c469e8ec5c1a28932f3fba9c2ea2582353ac17f21a8479595a33f7f76f0fb16a5ddb3fd1671a2
-
SSDEEP
49152:5gxo+eRJNToYXZpWjYe7YAnlBGK9GSuF+RgIHacCMW:N+eRzIYqYAnlt9/uFCHaL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 066cf9b2d9edde6a63192b3c513944a4b67a5f36cff40bead11074e22d7737b4
Files
-
066cf9b2d9edde6a63192b3c513944a4b67a5f36cff40bead11074e22d7737b4.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fsjvzlbf Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
felyeyiq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE