Static task
static1
Behavioral task
behavioral1
Sample
7a44fd3393fd6d6bbe2a40f8458cbbb80208672a77956fc7efeb8d61743f594c.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
7a44fd3393fd6d6bbe2a40f8458cbbb80208672a77956fc7efeb8d61743f594c.exe
Resource
win11-20240426-en
General
-
Target
7a44fd3393fd6d6bbe2a40f8458cbbb80208672a77956fc7efeb8d61743f594c
-
Size
2.3MB
-
MD5
71be8e5e731f721a4e9e112aec43781a
-
SHA1
cac333520e78b4d4c4b631b468e517505eb13714
-
SHA256
7a44fd3393fd6d6bbe2a40f8458cbbb80208672a77956fc7efeb8d61743f594c
-
SHA512
aacf68fa411ed1b9f181151d99fc192260c435eccf49347ab753a4782abc4d3e96a15a26cf05bd534aa0beaa4fc223e8f5344b74f238b7588360358d2873db60
-
SSDEEP
49152:Pg69SebPPiKgYyvqLhBOlXMvbfVJLRfXe1QoSBKGtlp:Pg69Sebi8LnhLLQQoSc+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a44fd3393fd6d6bbe2a40f8458cbbb80208672a77956fc7efeb8d61743f594c
Files
-
7a44fd3393fd6d6bbe2a40f8458cbbb80208672a77956fc7efeb8d61743f594c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
txaancbw Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fqspqsbg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE