Static task
static1
Behavioral task
behavioral1
Sample
894268da76b34da7a0a4bee38dbed7e0.exe
Resource
win7-20240221-en
General
-
Target
894268da76b34da7a0a4bee38dbed7e0.exe
-
Size
1.8MB
-
MD5
894268da76b34da7a0a4bee38dbed7e0
-
SHA1
7b802d31ed0174b86b35c8d96b2e8cddcbfbc679
-
SHA256
18c79070a74fdc6fc889bd9260b48e87cb2a1ffaa85e98bda0d7abfbf06f3345
-
SHA512
a4e2ee4335cae53872aef21f6b4ed61dad85fec68457d599442adbfced0f1db2240970bf74c3928c36bb54096e4a040ea4316c14eba1f52129dfd780c515e2c4
-
SSDEEP
49152:AUOZO/Vfe3iv6ubGrasaJTWntS2Z1AO9y9:AGVEOPsa9WFAgy9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 894268da76b34da7a0a4bee38dbed7e0.exe
Files
-
894268da76b34da7a0a4bee38dbed7e0.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iqqbreiy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lcrzljmm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE