Static task
static1
Behavioral task
behavioral1
Sample
64d0bc1f8bfeaa62d78c164f7edd6ad85474101ff132efd0df48c32fbe7fe6f6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
64d0bc1f8bfeaa62d78c164f7edd6ad85474101ff132efd0df48c32fbe7fe6f6.exe
Resource
win10v2004-20241007-en
General
-
Target
64d0bc1f8bfeaa62d78c164f7edd6ad85474101ff132efd0df48c32fbe7fe6f6
-
Size
1.8MB
-
MD5
4b89df269adfd4ddc1e017983b7341af
-
SHA1
846cf4e334c800a10211fb75dad8c188f14e425d
-
SHA256
64d0bc1f8bfeaa62d78c164f7edd6ad85474101ff132efd0df48c32fbe7fe6f6
-
SHA512
f213f401ced34ed06c2040137456835005da4bbfedfd1d9af353383d2949fb19821fa855b1503c8b0f55c16301eac3ba50f7cea81e72b3ebafb07b5b3fbd65fa
-
SSDEEP
24576:xHHfA3yNiFv+WQxsMrtSlZZwmDZ1zWecmot8gmUja8KDmHGp4Rn3NHRvsRh6QjG:xnIKhsCSlZZPzohJja8tllDsRhEsQER
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d0bc1f8bfeaa62d78c164f7edd6ad85474101ff132efd0df48c32fbe7fe6f6
Files
-
64d0bc1f8bfeaa62d78c164f7edd6ad85474101ff132efd0df48c32fbe7fe6f6.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nqcchtbr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eeiijiso Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE