Static task
static1
Behavioral task
behavioral1
Sample
374fab344b7800860e270f1b7578d544.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
374fab344b7800860e270f1b7578d544.exe
Resource
win10v2004-20231222-en
General
-
Target
374fab344b7800860e270f1b7578d544
-
Size
3.5MB
-
MD5
374fab344b7800860e270f1b7578d544
-
SHA1
e8220008968eaa0d08a85dcf8f0f9674d7f8ce09
-
SHA256
8e92d96524421131112d62445c840f4fcb076f8c551daa4d08d695c95b4b2348
-
SHA512
2648a682e3b8c399e52d8f2d8b2ad5f74ec0308cec2faa3de5c67a75740e4de4f7486e36ef62fabf13b5ebfafb0d3495d1dbb46640cb62069871ac6bfe10a459
-
SSDEEP
98304:UqYIz3B2CVBQeOC1YwCjE4nH4KcIL8X15j54f79:zB2mBQ3C1YCUH428l5jqz9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374fab344b7800860e270f1b7578d544
Files
-
374fab344b7800860e270f1b7578d544.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 60KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 439KB - Virtual size: 502KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ndiulvyq Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mbsmibhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE