Static task
static1
Behavioral task
behavioral1
Sample
1000988d6280a52ddfb2e54a13cf08169df5f30854c172a65bceadefd425e950.exe
Resource
win7-20240221-en
General
-
Target
1000988d6280a52ddfb2e54a13cf08169df5f30854c172a65bceadefd425e950
-
Size
3.0MB
-
MD5
1cf0b09fafafb5dc3cc7922ff9153602
-
SHA1
bd8fc029a33f16f3370a90e285e084793195835c
-
SHA256
1000988d6280a52ddfb2e54a13cf08169df5f30854c172a65bceadefd425e950
-
SHA512
e78069947903a748e23cf3e6309aa4510434416dafdceee5dd0d930f6b96195089ab4bacc0a6e86149373a4ac6656d4b65223d2a32b9b68bad784b44e1c1b13d
-
SSDEEP
49152:AQdN4YQz03BC5Hpb/+6KfnsdkNkDb0WGA5xqyh:tdeYfxC5Jb/+6KfnFNkDbRvxq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1000988d6280a52ddfb2e54a13cf08169df5f30854c172a65bceadefd425e950
Files
-
1000988d6280a52ddfb2e54a13cf08169df5f30854c172a65bceadefd425e950.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 570KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
heawhyiv Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jfpgvyye Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE