Static task
static1
Behavioral task
behavioral1
Sample
127644d5a83056c3382ba984ee43cb8885b5b2bbc67a2d7bed237f7420c332f5.exe
Resource
win7-20240220-en
General
-
Target
127644d5a83056c3382ba984ee43cb8885b5b2bbc67a2d7bed237f7420c332f5
-
Size
1.8MB
-
MD5
252a2313b72c0d8629380aa03371d152
-
SHA1
141b3e296b4e88404de5cabd43f827872184ff99
-
SHA256
127644d5a83056c3382ba984ee43cb8885b5b2bbc67a2d7bed237f7420c332f5
-
SHA512
b43982fa99af43f3f67a4d7a459db6ee3fd81f646b9ed4ccc7a36b73ac12b189c2abc0d657505c1a4b100ddc2b2a41a72e7be12e7ab6982066aa6e077f64e98e
-
SSDEEP
49152:drjxQ9zbx9UkHFNg91jiLSy50j+tM8ODlQGaCulIFRTiR8:dry9X349hiuymKaL3ulIzG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 127644d5a83056c3382ba984ee43cb8885b5b2bbc67a2d7bed237f7420c332f5
Files
-
127644d5a83056c3382ba984ee43cb8885b5b2bbc67a2d7bed237f7420c332f5.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fhkljzjj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wwxpxulk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE