Static task
static1
Behavioral task
behavioral1
Sample
7af792a9886c779c4f1bb2eabd37dd68.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7af792a9886c779c4f1bb2eabd37dd68.exe
Resource
win10v2004-20231215-en
General
-
Target
7af792a9886c779c4f1bb2eabd37dd68
-
Size
1.1MB
-
MD5
7af792a9886c779c4f1bb2eabd37dd68
-
SHA1
e2f9a3ca17bb0dd857f765a2ecc2d30bbbb0af2b
-
SHA256
56769735d4e99e856c4ad2eb7eeb2cb5b1243c649be8cad97ed67e8a588d8e1f
-
SHA512
98e55a685d265a497beb3deaa99108dd7d852d864674ce76a9211a16a15e44b0b64a8a928df47904e816a486e3d967ba23f8b41be0ea079c0bb0bb1618b56270
-
SSDEEP
24576:FEGe582hJctJryyL2vWzMBbX4SOdtkJpju+fQdcL3ULh:qGe588ctJryyCOzKN6kJYdcLah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7af792a9886c779c4f1bb2eabd37dd68
Files
-
7af792a9886c779c4f1bb2eabd37dd68.exe windows:5 windows x86 arch:x86
6cb7c652105d9b2b2ff7b5309e0e37cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
Sections
bvhrilsc Size: 272KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yzxgdjsl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tghbmmiu Size: 797KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hxmlnmbt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE