Static task
static1
Behavioral task
behavioral1
Sample
a01f0b12eea874d4481f86a458e8f624bca850b02f1e621dddd9de4305b64815.exe
Resource
win7-20230220-en
General
-
Target
a01f0b12eea874d4481f86a458e8f624bca850b02f1e621dddd9de4305b64815
-
Size
9.9MB
-
MD5
cfc7fcac5976f5b64561d461cc0276f3
-
SHA1
9258f7989f1192e7b9f14dae2799738b51f29011
-
SHA256
a01f0b12eea874d4481f86a458e8f624bca850b02f1e621dddd9de4305b64815
-
SHA512
1e751d7392deee193dc8e8460a3ccb6abd1872e35ff602782e57c22dadbb25a0515c2babf9924f4612b12678207fbd429dac79d1950a27b3700d1ce2ad8d4002
-
SSDEEP
196608:f60qFAXJkMErweXzkg+U/BgbK+whGehvPEl5ayMeLxyF5CW/:VZk5hzMdNnYSnMeLxyn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a01f0b12eea874d4481f86a458e8f624bca850b02f1e621dddd9de4305b64815
Files
-
a01f0b12eea874d4481f86a458e8f624bca850b02f1e621dddd9de4305b64815.exe windows x64
dc12932426806b6b47a373d7ae42c21d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
mscoree
_CorExeMain
Sections
Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oxqjtaao Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qyeaheja Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE