Static task
static1
Behavioral task
behavioral1
Sample
fd2430a0d888e9fbbc4d79a1f94f7966c378fd2d8ca506a43d629551012b18ce.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
fd2430a0d888e9fbbc4d79a1f94f7966c378fd2d8ca506a43d629551012b18ce.exe
Resource
win10v2004-20241007-en
General
-
Target
fd2430a0d888e9fbbc4d79a1f94f7966c378fd2d8ca506a43d629551012b18ce
-
Size
2.9MB
-
MD5
2ae04600369c0c281169f8127b31b01b
-
SHA1
15742acafa75c0bd4f889861ae89c95c957496d8
-
SHA256
fd2430a0d888e9fbbc4d79a1f94f7966c378fd2d8ca506a43d629551012b18ce
-
SHA512
4c4d1bfc769278bcd2c75892e0cb494effe6c1c1d98eda98dd3a4fec11f8b679cbcddbb977f8c29eeec57b045b6046cbf35ef47091b977cdc3690e4016f878f4
-
SSDEEP
49152:HKT1j3K6RX4MV84Wzz2hkJTV+zKRtdzk:U139X4MV84Yz+kJR3x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd2430a0d888e9fbbc4d79a1f94f7966c378fd2d8ca506a43d629551012b18ce
Files
-
fd2430a0d888e9fbbc4d79a1f94f7966c378fd2d8ca506a43d629551012b18ce.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ifhbxecu Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ymzkxfet Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE