Static task
static1
Behavioral task
behavioral1
Sample
7f6b047a71808a94e2e3f55c56289b85fdcf77869eb8da96ddbb05bf102a6c05.exe
Resource
win7-20231129-en
General
-
Target
7f6b047a71808a94e2e3f55c56289b85fdcf77869eb8da96ddbb05bf102a6c05
-
Size
2.2MB
-
MD5
e8dfa4d5ad3cc8dc3c910bf96e0343d4
-
SHA1
131f6b7b69c43dda2c5ebd1522408f1e92eaa40d
-
SHA256
7f6b047a71808a94e2e3f55c56289b85fdcf77869eb8da96ddbb05bf102a6c05
-
SHA512
8ff401d3750fb30caad45e1094d4f3b28c1f8705a6806f36274fb8a723d4c2faece0d9709277e509f5a270833a315b6a407c065b72bb75b3f827116b8202d1fd
-
SSDEEP
49152:eJX4TcBKg0ms8+HvFdGEvG5PTYM4PSHiX8tacIiPgyOEx5w0:eJX4xg0mspHvGr5PTYtIiMgZUFm0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f6b047a71808a94e2e3f55c56289b85fdcf77869eb8da96ddbb05bf102a6c05
Files
-
7f6b047a71808a94e2e3f55c56289b85fdcf77869eb8da96ddbb05bf102a6c05.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 572KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ckscgcnn Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bwerhudv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE