Static task
static1
Behavioral task
behavioral1
Sample
02a1d7a37919927e0b5e2d2120ec1780fed9833e811d23cc51ce81188b85611e.exe
Resource
win7-20240221-en
General
-
Target
02a1d7a37919927e0b5e2d2120ec1780fed9833e811d23cc51ce81188b85611e
-
Size
1.8MB
-
MD5
1c1786a4fc687b128f0c6f58ca480c38
-
SHA1
95c36a418ec9b1b4eb35ccc6f2bdbac9c6755c5d
-
SHA256
02a1d7a37919927e0b5e2d2120ec1780fed9833e811d23cc51ce81188b85611e
-
SHA512
bc9f21d851eefe4419c002e963c11b932e1710c31f245039ac5b9f9484956b52cb2ecc2fd2c471c2fe6d9776c179436c54c0817559084fbe4e0c2d4adc0e3f23
-
SSDEEP
49152:h97tVtWTT/nCs46y9K72aqgSiuPyzab8BKzG:h95qTq1/U+iuPm5Kz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a1d7a37919927e0b5e2d2120ec1780fed9833e811d23cc51ce81188b85611e
Files
-
02a1d7a37919927e0b5e2d2120ec1780fed9833e811d23cc51ce81188b85611e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wnjikpqx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
trapvxgj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE