Static task
static1
Behavioral task
behavioral1
Sample
dfa5f8e0cffe45f1178d3cf508a392b9f955b04a01b4bdc7b7826916a7541162.exe
Resource
win7-20231023-en
General
-
Target
dfa5f8e0cffe45f1178d3cf508a392b9f955b04a01b4bdc7b7826916a7541162
-
Size
10.0MB
-
MD5
4ba259f54c153601ca0cf908fd2d96e3
-
SHA1
68b192d76610cd592243bbce2201813425751ea1
-
SHA256
dfa5f8e0cffe45f1178d3cf508a392b9f955b04a01b4bdc7b7826916a7541162
-
SHA512
cf0d131aaf574b1627b1be9665c60a9c2f2389e80705eb79aaa77ca9da34fee7aa2f4f41215fa42d8836ba81fc02ca6842f9e614eaae1d7844f6dbed714136a7
-
SSDEEP
196608:w54GibPJ11ytlCw0G5oVMGqJlj5CNMbtVWnrBFJCsK8B5ZdX:w55ibB1oCw0G57RlVCNu8vJBKaVX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa5f8e0cffe45f1178d3cf508a392b9f955b04a01b4bdc7b7826916a7541162
Files
-
dfa5f8e0cffe45f1178d3cf508a392b9f955b04a01b4bdc7b7826916a7541162.exe windows:5 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 926KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wjuihdko Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
anmwwxds Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE