Static task
static1
Behavioral task
behavioral1
Sample
a2643e9273c5ef35d63d63a0edd7acd80516c223512caf3132fae740a157b4ef.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a2643e9273c5ef35d63d63a0edd7acd80516c223512caf3132fae740a157b4ef.exe
Resource
win10v2004-20250207-en
General
-
Target
a2643e9273c5ef35d63d63a0edd7acd80516c223512caf3132fae740a157b4ef
-
Size
1.8MB
-
MD5
9c4a6b21f788b6a05a0ecf0156a3e6dd
-
SHA1
81b84d6f1fd396cd3442f76da18cc9d0b9529aa9
-
SHA256
a2643e9273c5ef35d63d63a0edd7acd80516c223512caf3132fae740a157b4ef
-
SHA512
ad6a48e92890b2ddadf0f0c8f6a14a92a698c701d0cd4a2fd5504c5a76dc46d9180fff108cff4adde7615c9c16179d27993d2547481e3b7977f0f4ad5c74972e
-
SSDEEP
49152:hPX1lHF25v/HSw0xgo/7SzU44d9+Ao6P1jFhofJE2AQ:hPFlHF2tExgiGmd9RVfofJEQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2643e9273c5ef35d63d63a0edd7acd80516c223512caf3132fae740a157b4ef
Files
-
a2643e9273c5ef35d63d63a0edd7acd80516c223512caf3132fae740a157b4ef.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zmsiqvho Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
phgbpbip Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE