Static task
static1
Behavioral task
behavioral1
Sample
701f7a9693b604b7eef8e51ecbe35d5b1b30538e06cacaaac896094931cde977.exe
Resource
win7-20230831-en
General
-
Target
701f7a9693b604b7eef8e51ecbe35d5b1b30538e06cacaaac896094931cde977
-
Size
2.4MB
-
MD5
131f812ff93313b0ccafa01d389f544a
-
SHA1
aac1561b72e3d71a5eedd8caaf78095e0c70b24d
-
SHA256
701f7a9693b604b7eef8e51ecbe35d5b1b30538e06cacaaac896094931cde977
-
SHA512
f372843171bf68ebf0245300687ddde6a5658c8458ab800a97e8fa8e92d0eccc6855675ff537b85b6d12f1f2ea87f77e4f90301584faf6b38446bfc754ae5e33
-
SSDEEP
49152:pR+lohNPxhHAitoyJfgQMh6Me9jdPMvYq8rY+4Z59bZKmNJico:K+AihJoQMgjlMvYq8rQ5ZZTico
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 701f7a9693b604b7eef8e51ecbe35d5b1b30538e06cacaaac896094931cde977
Files
-
701f7a9693b604b7eef8e51ecbe35d5b1b30538e06cacaaac896094931cde977.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 408KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rcehdsds Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pnqlsado Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6�u' Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE