Static task
static1
Behavioral task
behavioral1
Sample
V2D0I_random.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
V2D0I_random.exe
Resource
win10v2004-20250129-en
General
-
Target
V2D0I_random.exe
-
Size
2.1MB
-
MD5
6236a0f253b635db9dc436bcdf8760f1
-
SHA1
ed4fd3548ba42beca7fbc73538b2097c7677d10b
-
SHA256
f758d7e254cb8fcd0f8fcbeea716ccee5305acc4279c94d367c71d75fcea3b42
-
SHA512
b6daded3fa328d6f1b49f902936be02e69cc685598a6b9fb5b43277330407e0df688048fe9d07a0cb742efeae6e2f867000c8a7274b906223b7b65db14c7d15a
-
SSDEEP
49152:RPVvoutG0l35Q/wcohXw5GTkQlf02ZDk7vsLipRw:R9vokGupIwZmWMyYo2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource V2D0I_random.exe
Files
-
V2D0I_random.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nincghsn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkllyovg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE