Start
Static task
static1
Behavioral task
behavioral1
Sample
9f7586b19e779723513dc5dd122d78767e1148fc5f728535a5a61e5853283553.exe
Resource
win7-20231129-en
General
-
Target
9f7586b19e779723513dc5dd122d78767e1148fc5f728535a5a61e5853283553.exe
-
Size
2.1MB
-
MD5
bff833e31e294ad1a723d433daf380fb
-
SHA1
8dbaf17cdbd02b2ff872b203c09351f8d3d4cf05
-
SHA256
9f7586b19e779723513dc5dd122d78767e1148fc5f728535a5a61e5853283553
-
SHA512
dc67b48f442f552cc73a565f3021377eb4a58f417dbc207a9756e3fde9cb41a8f54c8ad370df7cf3c4d246b877764219d00bad6e0a09ef5f33f44dcd8d8fa4fd
-
SSDEEP
49152:0SUl6vD5DxN6HHLJFwIZjkWgHRW67w/0luPDAg/nqOApLrcDoD1a:0SSwD5Dxk3jOVBiDAcqOApLr6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f7586b19e779723513dc5dd122d78767e1148fc5f728535a5a61e5853283553.exe
Files
-
9f7586b19e779723513dc5dd122d78767e1148fc5f728535a5a61e5853283553.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
akpqkvlo Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pethcsjz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE