Start
Static task
static1
Behavioral task
behavioral1
Sample
4e4ac4f610fe67b9b5ddd17af130d8ae09afa8cc16a7f187001460f2cf3575a0.exe
Resource
win7-20240220-en
General
-
Target
4e4ac4f610fe67b9b5ddd17af130d8ae09afa8cc16a7f187001460f2cf3575a0
-
Size
2.0MB
-
MD5
d3c837d6e674007ae22f88bc788b8b7f
-
SHA1
89cd275203bf70f83b87a4fef7c03cd1ea069de1
-
SHA256
4e4ac4f610fe67b9b5ddd17af130d8ae09afa8cc16a7f187001460f2cf3575a0
-
SHA512
c676e923fae9a7e62f0451e829ad92e7b5fa4e18e40c92bc7b6a16f47f5dcf50eeaa294129becb875b57db37919b4f3397aeeae343ff5651e25a85b4208c0943
-
SSDEEP
49152:QaR2wtFNbcdc16u9ROF30R9bFPAF0nBSOLzDLXEN8y:QaRjO+X/OTcdL/LXE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e4ac4f610fe67b9b5ddd17af130d8ae09afa8cc16a7f187001460f2cf3575a0
Files
-
4e4ac4f610fe67b9b5ddd17af130d8ae09afa8cc16a7f187001460f2cf3575a0.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 592KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jlrixiyd Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aipkbxfg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE