Start
Static task
static1
Behavioral task
behavioral1
Sample
f5857488cf98ed3c25a830f2456ef704af59ff01366813bd3369c9518b4229de.exe
Resource
win7-20240221-en
General
-
Target
f5857488cf98ed3c25a830f2456ef704af59ff01366813bd3369c9518b4229de
-
Size
2.9MB
-
MD5
4286cfb7a9d2f0df8d386eda2a06304f
-
SHA1
4a00227ccaa7d27b0193463a4bc5762ec7e11e3b
-
SHA256
f5857488cf98ed3c25a830f2456ef704af59ff01366813bd3369c9518b4229de
-
SHA512
8028b17021bbcfbf999a13eb4cce29e7472a3087e605040a65342697263889990be52734aa696ae37ef05d895b47897633200bddabf226e42e6cc11a552fa02a
-
SSDEEP
49152:38ttPKw7gSt/jtHS0XAVMfO8nMLadNERdYk5cE0:383PKw7gWMHMW8nMLadNER3y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5857488cf98ed3c25a830f2456ef704af59ff01366813bd3369c9518b4229de
Files
-
f5857488cf98ed3c25a830f2456ef704af59ff01366813bd3369c9518b4229de.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 574KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mjlrxvcl Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crvrvfad Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE