Static task
static1
Behavioral task
behavioral1
Sample
e1d5bf5915808a8f9a0589bdb47c36d4044bcfae8192c9504ac2198c2ad98837.exe
Resource
win7-20240221-en
General
-
Target
e1d5bf5915808a8f9a0589bdb47c36d4044bcfae8192c9504ac2198c2ad98837
-
Size
1.8MB
-
MD5
902ab05b635167c7fa3c318131ae3be4
-
SHA1
4ed4d034c247a5df9f786f8f7dc9906b1cc4bcd8
-
SHA256
e1d5bf5915808a8f9a0589bdb47c36d4044bcfae8192c9504ac2198c2ad98837
-
SHA512
462598d4c4daa4083027780c05a9de15d907d1a07451b813a0ddb1d1cd3eb27fcb54dbc2ec5b5499b0cf6d544b0bba109b027e3204f3e8af7d8df18b1f48bd2a
-
SSDEEP
49152:uRpdiAdRAoUP9UXqeqvlV6uzRFBBXTgwZcT6:uxiAnATFelqvl5Fzswj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e1d5bf5915808a8f9a0589bdb47c36d4044bcfae8192c9504ac2198c2ad98837
Files
-
e1d5bf5915808a8f9a0589bdb47c36d4044bcfae8192c9504ac2198c2ad98837.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
miuvgpmr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lpnwfpgm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE