Static task
static1
Behavioral task
behavioral1
Sample
12926c8764f6d66ce4ebcb70c89271801af17b84227c1e5f7610b494d9d6343e.exe
Resource
win7-20240221-en
General
-
Target
12926c8764f6d66ce4ebcb70c89271801af17b84227c1e5f7610b494d9d6343e
-
Size
2.3MB
-
MD5
48d97a7d7597bea163e1f13564476f9f
-
SHA1
89ce6d968a23496d10ee9cdd6ae0173a43082598
-
SHA256
12926c8764f6d66ce4ebcb70c89271801af17b84227c1e5f7610b494d9d6343e
-
SHA512
95e347de7bdea786ea65201b9b8bbaab9df3ff19eaca4d09ea8e3b9e9fe424768b9426c427aaeb035f6d6f252a4a4e59182ec28923dd09bab7e4af2e377a755c
-
SSDEEP
49152:Wg69SebPPiKgYyyfB0naLyGuHh1wu1iXzB2+h:Wg69SebiM6aaDoXzB/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12926c8764f6d66ce4ebcb70c89271801af17b84227c1e5f7610b494d9d6343e
Files
-
12926c8764f6d66ce4ebcb70c89271801af17b84227c1e5f7610b494d9d6343e.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qtbqgzwa Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
trqyvmnc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE