Static task
static1
Behavioral task
behavioral1
Sample
e394a075bb91bf44abfdf432ae0c4be835be1511de53716a493c595dcf6638a9.exe
Resource
win7-20240221-en
General
-
Target
e394a075bb91bf44abfdf432ae0c4be835be1511de53716a493c595dcf6638a9
-
Size
2.2MB
-
MD5
5df0a30dffbf494ae4b7ca7bff81e8b5
-
SHA1
b49ab9ac425026d556eec8280e43276d7d5eb32f
-
SHA256
e394a075bb91bf44abfdf432ae0c4be835be1511de53716a493c595dcf6638a9
-
SHA512
643a812ff8677f0784f475d8af711267fd60e0b08d3678fafb1e5c751c9884ab185206040bbe58df7ce1714c1ac6478c2e6fa5e1650f2c8adb48c9ca509c472c
-
SSDEEP
49152:ysCO3ONkA+hohhhKatHagV//Za6XCGQ5z8dL4Pkw5XaLSakb:wwA4oUkag1A6XCLwdUX5XaGa+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e394a075bb91bf44abfdf432ae0c4be835be1511de53716a493c595dcf6638a9
Files
-
e394a075bb91bf44abfdf432ae0c4be835be1511de53716a493c595dcf6638a9.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 572KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
owjkfeqm Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uxhjkfeo Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE