Static task
static1
Behavioral task
behavioral1
Sample
2500f35b93ad6f41ff98b4217cdf8d79.exe
Resource
win7-20231215-en
General
-
Target
2500f35b93ad6f41ff98b4217cdf8d79
-
Size
2.7MB
-
MD5
2500f35b93ad6f41ff98b4217cdf8d79
-
SHA1
bcab08769aa7b0f2a381c3376e590616109feefd
-
SHA256
3968ca29cda9d8bc1b2b408550144541edb66007b2ee3bc6224584ab85d8bfdd
-
SHA512
9180104e120cfcfdcf2345f24ccec22a48c69ee3bc2a76b2065a92af82d2e4a665c5ed9466d9ea478c6474020b30f6023024c3793c3db4321d634525caf58c0d
-
SSDEEP
49152:GWnn/Y08LftGrTw52DFVrHxNDPhraB9fKS4KFaCCr:GWnnD8LftGrTw52pVrHJi9f34KFm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2500f35b93ad6f41ff98b4217cdf8d79
Files
-
2500f35b93ad6f41ff98b4217cdf8d79.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oravibxr Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zbppkdwd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE