Static task
static1
Behavioral task
behavioral1
Sample
d67d1471ce351f4cf77b2ac9bb8491e0b9454c121e4158b6ede294bc610009c5.exe
Resource
win7-20240221-en
General
-
Target
d67d1471ce351f4cf77b2ac9bb8491e0b9454c121e4158b6ede294bc610009c5
-
Size
3.0MB
-
MD5
b1d664b3109667f57eb5a5eac89c34ce
-
SHA1
7e22b4bfe0c8f41d546ba9ed57b2c238bfe49a94
-
SHA256
d67d1471ce351f4cf77b2ac9bb8491e0b9454c121e4158b6ede294bc610009c5
-
SHA512
1a238df48a0a1eee9cbb0df4e3c91626cb2fe9c129b8e42c5e9d294dcd970bcc90b4ea671bc3e48cbec171623ac25187694fcc4ad4c034f12304ce827e29993f
-
SSDEEP
49152:FKH3PgaWcD9RFCH3Cp1X1NlqH3p9MLN1A93WiXmL:FKH3PggD9RFCHyp1X17qH3pibA93Wi4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d67d1471ce351f4cf77b2ac9bb8491e0b9454c121e4158b6ede294bc610009c5
Files
-
d67d1471ce351f4cf77b2ac9bb8491e0b9454c121e4158b6ede294bc610009c5.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 573KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gcwrawfl Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zeflzbqa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE