Static task
static1
Behavioral task
behavioral1
Sample
f8c54e5d8a702bc46f0d824ee29ca9b45a3b6c9216578b4ece911e8c57f9419d.exe
Resource
win7-20240221-en
General
-
Target
f8c54e5d8a702bc46f0d824ee29ca9b45a3b6c9216578b4ece911e8c57f9419d
-
Size
1.8MB
-
MD5
bb45d62ca3f0d3a68f82e70eb5b1f90a
-
SHA1
d078bb4bee3cadc712661d43e56f52bb3fc5a20d
-
SHA256
f8c54e5d8a702bc46f0d824ee29ca9b45a3b6c9216578b4ece911e8c57f9419d
-
SHA512
a89258b202396a1e1a3f8241118ee0094ea153fc809fef879db328e43d1a9b31bb183a5b1b881c8648f97d1e2106025ae7076ff1a7a60e99aa7bcbb9e7026e86
-
SSDEEP
24576:ZpC4D8Yq00vQOd588LYJmP8NVqACWt0XlrvfmZEEhDXrEAx+h5ZfYlAtlCT36Akn:ZpPta0C+R1gNHmNXwAWP3+eBYsYCo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8c54e5d8a702bc46f0d824ee29ca9b45a3b6c9216578b4ece911e8c57f9419d
Files
-
f8c54e5d8a702bc46f0d824ee29ca9b45a3b6c9216578b4ece911e8c57f9419d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fmlvgbcn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ygrohsje Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE