Static task
static1
Behavioral task
behavioral1
Sample
0f1d1aed639362ce37edde5b4c278555bec835b1a5d3d5b90a7b8bbce0d83b86.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0f1d1aed639362ce37edde5b4c278555bec835b1a5d3d5b90a7b8bbce0d83b86.exe
Resource
win10v2004-20241007-en
General
-
Target
0f1d1aed639362ce37edde5b4c278555bec835b1a5d3d5b90a7b8bbce0d83b86.exe
-
Size
3.1MB
-
MD5
b54cf9188652a3bfe166d33c542f8ac6
-
SHA1
4335fa4d75ab3ba85613d163f8f930d9adf087ce
-
SHA256
0f1d1aed639362ce37edde5b4c278555bec835b1a5d3d5b90a7b8bbce0d83b86
-
SHA512
b6ef0f5c0db58bed81c3c8c5f506942503c00d7c97099ac52b290567fe2578b88b8d5589715583b1b7b80f6a30e344e870f416eda0a241ed002b8fea0171892f
-
SSDEEP
49152:k4HtEx2aA9j9Gst1RPlc6eqEgbcVCaY8MBVkBiS5wRwnij4Pk:5e9Ujgst1RPlc6eubCCaBPhWRBE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f1d1aed639362ce37edde5b4c278555bec835b1a5d3d5b90a7b8bbce0d83b86.exe
Files
-
0f1d1aed639362ce37edde5b4c278555bec835b1a5d3d5b90a7b8bbce0d83b86.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jlvlbxwn Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hiserdkf Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE