Static task
static1
Behavioral task
behavioral1
Sample
4390a13edf4f5ad0043c61fc2242d6bf8d68cf423f95734f22e1fe849a5db0b2.exe
Resource
win7-20240221-en
General
-
Target
4390a13edf4f5ad0043c61fc2242d6bf8d68cf423f95734f22e1fe849a5db0b2
-
Size
1.8MB
-
MD5
d8bc89b4c7d36606a712e371bac32a50
-
SHA1
c2578c7ad040b38e799d73added4101a223a7a1b
-
SHA256
4390a13edf4f5ad0043c61fc2242d6bf8d68cf423f95734f22e1fe849a5db0b2
-
SHA512
4207def182e0f05f222fd49b6d316b22f8d7afd44e603930add97aa68838ed89b3045311b7dd0646d64d4b4d7f4d9aae1855e25b1dfbd7a11e3fb458fd8e2051
-
SSDEEP
49152:jIdmbOBfG7Dr7PVKuPJ+EYb2kW3v73ALabGY9por:jbCO7Dv5PJV62kW/zAL8Gf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4390a13edf4f5ad0043c61fc2242d6bf8d68cf423f95734f22e1fe849a5db0b2
Files
-
4390a13edf4f5ad0043c61fc2242d6bf8d68cf423f95734f22e1fe849a5db0b2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kkgcxobx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zmjfqdlb Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE