Static task
static1
Behavioral task
behavioral1
Sample
10fe89575c9cd37e51de675a8a13d480.exe
Resource
win7-20231215-en
General
-
Target
10fe89575c9cd37e51de675a8a13d480
-
Size
8.2MB
-
MD5
10fe89575c9cd37e51de675a8a13d480
-
SHA1
4679ea2a6b1c113faefc093f35e4dba3fd24bcc1
-
SHA256
b792e326a0617eea3163ff624a6ea370915f29583538c583fd1b34468b3ff2a5
-
SHA512
314fa869e1170a2dd1b7d489918eab2c93f13a07f1455040b26b29938f3b05229870d05e3ba66353a153c6d46ddbf95bf2794f85c1573d81e00d56697fd6d5f1
-
SSDEEP
196608:utI6hA1qSHUPM78uSXTiLdDvtv+GBFIQRnXVg4ej1k/:72ahDvtmGz1ZVdI1k/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10fe89575c9cd37e51de675a8a13d480
Files
-
10fe89575c9cd37e51de675a8a13d480.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 22KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.7MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ustmhpdi Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dknpishn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE