Start
Static task
static1
Behavioral task
behavioral1
Sample
7a54e5c76068d0b91153629eaaf1a63d5111b51fccf49.exe
Resource
win7-20240221-en
General
-
Target
7a54e5c76068d0b91153629eaaf1a63d5111b51fccf49.exe
-
Size
3.0MB
-
MD5
0bc42c7443957056988e03e993dbe703
-
SHA1
09ed09b4ec85e43ff4c8885ad45fe5407aa57248
-
SHA256
7a54e5c76068d0b91153629eaaf1a63d5111b51fccf49194ec9bb7012ee8c730
-
SHA512
065dfadabea73618f3b6fd8c44a672c8f90f415dee176a402fb29ddacb9dffab2af4ee0dc1b95f8a4832b8b243e482614354830ec93d52401bc5062ed7bf6869
-
SSDEEP
49152:kS5qyY1RxU9tbV7xno2ZhimjWqw9iG2+H19ed2AiirCrj1:kShAitbV7xno2hjWqw9BrV9edU2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a54e5c76068d0b91153629eaaf1a63d5111b51fccf49.exe
Files
-
7a54e5c76068d0b91153629eaaf1a63d5111b51fccf49.exe.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 574KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rjjmulxl Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
llfjvfog Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE