Static task
static1
Behavioral task
behavioral1
Sample
9766b5775bd5b2c858232f16fb899f16bde2b53cb4fbdb0b0b2eff35b7d83464.exe
Resource
win7-20240221-en
General
-
Target
9766b5775bd5b2c858232f16fb899f16bde2b53cb4fbdb0b0b2eff35b7d83464
-
Size
1.8MB
-
MD5
5cefee6746f1ed9c55144a3745551b45
-
SHA1
1332e770c510035b92b9458920329dfd3fe0041a
-
SHA256
9766b5775bd5b2c858232f16fb899f16bde2b53cb4fbdb0b0b2eff35b7d83464
-
SHA512
e2f1354442c27e13398a7242e86b7c3c94fef9dfce67ace1c8a956facc7f912e900d1e44b98d1fc3ea1e13770d78c1e5e278855eef024a8971375091bf73c4b2
-
SSDEEP
49152:S9GHdiexGipR9RCJIBnXO8dM5Y1DD4HRXTb++39:0GHpGipR9RCJEXovxDb+k9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9766b5775bd5b2c858232f16fb899f16bde2b53cb4fbdb0b0b2eff35b7d83464
Files
-
9766b5775bd5b2c858232f16fb899f16bde2b53cb4fbdb0b0b2eff35b7d83464.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yudqafja Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
raswtnoc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE