Static task
static1
Behavioral task
behavioral1
Sample
084dd0f273398d8c6558dec0c8ab58f48c1655e91a1526cdba23e925c1e38b0e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
084dd0f273398d8c6558dec0c8ab58f48c1655e91a1526cdba23e925c1e38b0e.exe
Resource
win10v2004-20241007-en
General
-
Target
084dd0f273398d8c6558dec0c8ab58f48c1655e91a1526cdba23e925c1e38b0e
-
Size
1.7MB
-
MD5
a5c8e1cb34e0966e67658d1a5dcbf151
-
SHA1
4ad23a922c4e68f9031064d25291797ab0cc6130
-
SHA256
084dd0f273398d8c6558dec0c8ab58f48c1655e91a1526cdba23e925c1e38b0e
-
SHA512
8fed13a4eb1039486e88c8d5c9413d1f9ce0a0c4d0540610346e3894adda822d0cc88568ab9e1286d7d25ea710273318e1b5d3d3f476c1123963985ecee0b7ce
-
SSDEEP
49152:nj+ZGhHNbp/nZhU8SdpB/Ka4aRm/xXYJFGdbO07GqP3e:KgZv/ZhAdphKa46KxXuwdZN3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084dd0f273398d8c6558dec0c8ab58f48c1655e91a1526cdba23e925c1e38b0e
Files
-
084dd0f273398d8c6558dec0c8ab58f48c1655e91a1526cdba23e925c1e38b0e.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jkcvqpvu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ovblaloe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE