Static task
static1
Behavioral task
behavioral1
Sample
96dca2ea989f41ab9d2cfff04d026fd8ebf6af2ff63dd8ab33f6d9185e3b1df7.exe
Resource
win7-20240215-en
General
-
Target
96dca2ea989f41ab9d2cfff04d026fd8ebf6af2ff63dd8ab33f6d9185e3b1df7
-
Size
2.2MB
-
MD5
3ec9fefff3965cb89406fa507431e911
-
SHA1
dc0bc9bdc8ef6234338afe913568555fb57b8faa
-
SHA256
96dca2ea989f41ab9d2cfff04d026fd8ebf6af2ff63dd8ab33f6d9185e3b1df7
-
SHA512
fde03443c5ba7ba29ba273b586d2297aa7fdfcf44dc931d7c7dba826436251cf9a357e8e7de7c59e066d0ee4adbbf842e379228fec070529d544ab941554f984
-
SSDEEP
49152:d+uTxlB0IxZtCMNNTbHET03UjANFcJGNFmolGu:dtlBtZCMNh7h3UzGX/lG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96dca2ea989f41ab9d2cfff04d026fd8ebf6af2ff63dd8ab33f6d9185e3b1df7
Files
-
96dca2ea989f41ab9d2cfff04d026fd8ebf6af2ff63dd8ab33f6d9185e3b1df7.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 570KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gqmjtwxc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dhqjuebe Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE