Static task
static1
Behavioral task
behavioral1
Sample
5a7ed1ce6334bd5cb3026918a4c1aeb7f06148b571a796a2ce2c4754a5dd825f.exe
Resource
win7-20240215-en
General
-
Target
5a7ed1ce6334bd5cb3026918a4c1aeb7f06148b571a796a2ce2c4754a5dd825f
-
Size
1.6MB
-
MD5
62fa5b434aedac31c18a23bef26e841e
-
SHA1
d7cca23556cb4cad68c4a1dce20edca30983992d
-
SHA256
5a7ed1ce6334bd5cb3026918a4c1aeb7f06148b571a796a2ce2c4754a5dd825f
-
SHA512
6250150a3a1f441bf2df1ef73156a0de4b15f0093ebf0d8ee5a558d3e229f82e1443d84aa86155e8589ff7bbbbafc30c509036a50774b7377e5785d1993433b6
-
SSDEEP
49152:nSYiPDfcoYmtYzgYSCqUc7aBuE7f0vH7Y:SrPDfSLdSCqUcCn0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7ed1ce6334bd5cb3026918a4c1aeb7f06148b571a796a2ce2c4754a5dd825f
Files
-
5a7ed1ce6334bd5cb3026918a4c1aeb7f06148b571a796a2ce2c4754a5dd825f.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coanmdlt Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
irivqqvd Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE