Static task
static1
Behavioral task
behavioral1
Sample
f3335ca6df528ea805abb22802c662cc6166ef2115c6aad4097fb048962d5f1b.exe
Resource
win7-20240221-en
General
-
Target
f3335ca6df528ea805abb22802c662cc6166ef2115c6aad4097fb048962d5f1b
-
Size
1.8MB
-
MD5
215c961e8bf6798f8630c503ac6d2a11
-
SHA1
06f91d87d0b2ce5f99844b0113333df562b04e97
-
SHA256
f3335ca6df528ea805abb22802c662cc6166ef2115c6aad4097fb048962d5f1b
-
SHA512
83e1fcff1658806042c10a6b3f8d17864f65c504b43cfe6920fe329cf36ec11d903b8c2954496fb71e32bf0aa30ddb183e4c623cea2c50689adc7ee557be65be
-
SSDEEP
24576:T3ITL3wThr/PZCtsUxhVIjnuP+eKjB1J0zRIuTVgZg2YkM0pHQt4Ixcb3XtWoa:IrclxCtsUxcwKjB1Ja8S0pwWf43
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3335ca6df528ea805abb22802c662cc6166ef2115c6aad4097fb048962d5f1b
Files
-
f3335ca6df528ea805abb22802c662cc6166ef2115c6aad4097fb048962d5f1b.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gfgcliru Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hubvxooo Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE