Static task
static1
Behavioral task
behavioral1
Sample
9d65a6449e0e295be3f3bd88a5d3f7c8dbcdbbc5cd75b095bfd278c101acc90a.exe
Resource
win7-20240221-en
General
-
Target
9d65a6449e0e295be3f3bd88a5d3f7c8dbcdbbc5cd75b095bfd278c101acc90a
-
Size
2.2MB
-
MD5
627c36b476f370e22c648cd9b1850c8e
-
SHA1
1c230823367ced0bf7d49731e184574623d5435b
-
SHA256
9d65a6449e0e295be3f3bd88a5d3f7c8dbcdbbc5cd75b095bfd278c101acc90a
-
SHA512
d3d008fb052a41632c4a3ab9970393ff0ddc710454a911a3749b5029215720a79618bdd3824b8532fd75b79e4958d8276d8a4ab7ca56c52988941cd8ccc59858
-
SSDEEP
49152:gk6IL6FgW/c8hFW4GEd4Xy9O9h2InDbOAxrKDxl4:PJmWW/cWGEKXyiZXO+aa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d65a6449e0e295be3f3bd88a5d3f7c8dbcdbbc5cd75b095bfd278c101acc90a
Files
-
9d65a6449e0e295be3f3bd88a5d3f7c8dbcdbbc5cd75b095bfd278c101acc90a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 570KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebektntq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebcaabme Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE