Static task
static1
Behavioral task
behavioral1
Sample
0fcfdb59067b35ccd70de2c807e43a0ddb23eb31dabe4894cf8af3150e40e032.exe
Resource
win7-20240215-en
General
-
Target
0fcfdb59067b35ccd70de2c807e43a0ddb23eb31dabe4894cf8af3150e40e032
-
Size
2.3MB
-
MD5
cbc8bc53f44b422eb911d174220fd6c4
-
SHA1
9f4edb5f95bc1d93a5f171bc4a666298621e8049
-
SHA256
0fcfdb59067b35ccd70de2c807e43a0ddb23eb31dabe4894cf8af3150e40e032
-
SHA512
7c64249a4dfc9e613775b3582f48d471faee6254188c547464976839d895e52044a0db5c9ad661265d066c02df3c1633f1ad09ca9856d68a8c15a304e7c30c14
-
SSDEEP
49152:0gd/S82x8PEQz6oqYIQS2tqPeHY5i4NRcxTWN1oAUlLjfF:E5UIL2t8e4VHN1nUlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fcfdb59067b35ccd70de2c807e43a0ddb23eb31dabe4894cf8af3150e40e032
Files
-
0fcfdb59067b35ccd70de2c807e43a0ddb23eb31dabe4894cf8af3150e40e032.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 570KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hvorvjjp Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
befbtdqg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE