Static task
static1
Behavioral task
behavioral1
Sample
b75286cceeb575f9f86556725760a66087614425dcbf830f8936bc6cbf29aad3.exe
Resource
win7-20240221-en
General
-
Target
b75286cceeb575f9f86556725760a66087614425dcbf830f8936bc6cbf29aad3
-
Size
1.8MB
-
MD5
d9792602487e0f8568a2eb6ad2f3bf65
-
SHA1
8885bb492c7662949d101245179ec999e6f3ccdc
-
SHA256
b75286cceeb575f9f86556725760a66087614425dcbf830f8936bc6cbf29aad3
-
SHA512
66744ac5d13fe621518417bdb8781d956a4e3132efe53fbfa9bd0a965b1e2f29a42dd9f7462c4ee209999a5cced8d80bd41d7e3c806b6eba64611ce69a83dc52
-
SSDEEP
49152:gB9vBxS5Eajoaof2eADae1I/94BKw4UTvt0l:OpBxaoJADa/F4p4UTF0l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b75286cceeb575f9f86556725760a66087614425dcbf830f8936bc6cbf29aad3
Files
-
b75286cceeb575f9f86556725760a66087614425dcbf830f8936bc6cbf29aad3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vdyfiotp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gebmngaq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE