Static task
static1
Behavioral task
behavioral1
Sample
7aef923681dd6bc1c270f2f134377d8d39113a83507342e7a041554598f6c96c.exe
Resource
win10v2004-20240226-en
General
-
Target
7aef923681dd6bc1c270f2f134377d8d39113a83507342e7a041554598f6c96c
-
Size
1.8MB
-
MD5
0698cb61208896cf1eabc408e73646e2
-
SHA1
be59b86f0947a7bda508ee9935dfba4cbbd517fc
-
SHA256
7aef923681dd6bc1c270f2f134377d8d39113a83507342e7a041554598f6c96c
-
SHA512
3efa13635a8f9a66aa87d4c32269efbe9909c419f92ba46fbf682b2b1d5a260bb163f47e476ef3b2051ef5d25454ba7502647704c3f81b103203d81887167458
-
SSDEEP
49152:kAZ1Xl3y3Mx07keoFoxTxSCjdXAZKcl+6c0bHJ:J/ys0HaSLjFtcIB0V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7aef923681dd6bc1c270f2f134377d8d39113a83507342e7a041554598f6c96c
Files
-
7aef923681dd6bc1c270f2f134377d8d39113a83507342e7a041554598f6c96c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ltghqkuv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fpvgjyjn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE