Static task
static1
Behavioral task
behavioral1
Sample
f61b9dceac15aeec1166033970f9e7f1fb9bd1370f837867fc52eea963828ce8.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
f61b9dceac15aeec1166033970f9e7f1fb9bd1370f837867fc52eea963828ce8.exe
Resource
win10v2004-20250217-en
General
-
Target
f61b9dceac15aeec1166033970f9e7f1fb9bd1370f837867fc52eea963828ce8
-
Size
2.0MB
-
MD5
7eaaa63ffe1d35e81aa0e1c8bd4a9e0d
-
SHA1
268bb7cbff8efd5f3121a0fce81103d7b55b59c3
-
SHA256
f61b9dceac15aeec1166033970f9e7f1fb9bd1370f837867fc52eea963828ce8
-
SHA512
30f42667d8a9631bd03479d8be9c783987c65c9e6c912ba10c6c2f82e341202ece492e7707b9e525622f52c57af4b51bcf4fff957d610d68a5e02a2db4e1de0f
-
SSDEEP
49152:r3V9fToIK1pkFa1LjOd9bMq0Lw4JZZs2OWqDaMt/IF:r3DcDgUgd9bMqWJZMGMt/IF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f61b9dceac15aeec1166033970f9e7f1fb9bd1370f837867fc52eea963828ce8
Files
-
f61b9dceac15aeec1166033970f9e7f1fb9bd1370f837867fc52eea963828ce8.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
skjsuzjb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lbumkgsn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE