Static task
static1
Behavioral task
behavioral1
Sample
b4067d0eb04dbd3387f917a6bc6512effedd47a6cc92a6d4aab0a0dacfae7caf.exe
Resource
win7-20240215-en
General
-
Target
b4067d0eb04dbd3387f917a6bc6512effedd47a6cc92a6d4aab0a0dacfae7caf
-
Size
3.0MB
-
MD5
715d1a17f9d5bbcd3c2857feff5acbda
-
SHA1
851e51e34d1507f5442268b76838079b1d440aff
-
SHA256
b4067d0eb04dbd3387f917a6bc6512effedd47a6cc92a6d4aab0a0dacfae7caf
-
SHA512
82ebbe90386af240ddda0122f97de6fa2becfee1812a7c28c657f2debd3c1af5db362d39050eeb6ad88fcd6bc9c470e8aa07d278bfda57440029edeefe38edcc
-
SSDEEP
49152:0xWVla92C7Mq/rY/Q/ZYQny0UyGd8n+fdAhY3:0GAYqD3/ZhyTIhY3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4067d0eb04dbd3387f917a6bc6512effedd47a6cc92a6d4aab0a0dacfae7caf
Files
-
b4067d0eb04dbd3387f917a6bc6512effedd47a6cc92a6d4aab0a0dacfae7caf.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 573KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pgxfsepa Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wzkaamuq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE