Static task
static1
Behavioral task
behavioral1
Sample
5ee2da935a7e1b76c9a2886e247cc651619af6afdaf6c24cd5f77f8fbf69054e.exe
Resource
win7-20240221-en
General
-
Target
5ee2da935a7e1b76c9a2886e247cc651619af6afdaf6c24cd5f77f8fbf69054e
-
Size
2.9MB
-
MD5
57c1e40754307120f7f13131739c2811
-
SHA1
16180be644bfd2af77b34e911c129d6bc43e7bb7
-
SHA256
5ee2da935a7e1b76c9a2886e247cc651619af6afdaf6c24cd5f77f8fbf69054e
-
SHA512
17a4a6c5be397f0412ec29b18405462937304c1010fbdc00fc8e8b59668ebdfa12d20e73b5377d4b329a31732736569fb481fcaeff0f5300c5c4419439e662a4
-
SSDEEP
49152:+GY4aFs0QUXy9JarRAQ0acQauiB3DgzcyBqOVD:etFjQUXqEVTZcQaN3EIytV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ee2da935a7e1b76c9a2886e247cc651619af6afdaf6c24cd5f77f8fbf69054e
Files
-
5ee2da935a7e1b76c9a2886e247cc651619af6afdaf6c24cd5f77f8fbf69054e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewbupsgz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fjequiqr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE