Start
Static task
static1
Behavioral task
behavioral1
Sample
20f56c766225ccd9d19edf9021ab2ce69071fb6ad80a69637fd9a7af02273a4a.exe
Resource
win7-20231129-en
General
-
Target
20f56c766225ccd9d19edf9021ab2ce69071fb6ad80a69637fd9a7af02273a4a.exe
-
Size
2.1MB
-
MD5
81713557ea8d0af915183a948912d141
-
SHA1
a8bb761c5eeb489f723eaed913c4f249e09ee466
-
SHA256
20f56c766225ccd9d19edf9021ab2ce69071fb6ad80a69637fd9a7af02273a4a
-
SHA512
c5ec019dc7fc44c375597d1c728cf3067471c1551a8cdca2298f7823191e9f193e8c3fb531bea4c8643077ad66427c60b0857c2785f5ef756b547e99b5db818d
-
SSDEEP
49152:JSUl6vD5DxN6HHLJFwMh90uMu2zRbqf1aAzhN4JK0sHncU011Q:JSSwD5Dxk5eQmK0mm11
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20f56c766225ccd9d19edf9021ab2ce69071fb6ad80a69637fd9a7af02273a4a.exe
Files
-
20f56c766225ccd9d19edf9021ab2ce69071fb6ad80a69637fd9a7af02273a4a.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yhmmlddk Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jnztigrw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE