Static task
static1
Behavioral task
behavioral1
Sample
727b24253f1dc39e769d9ce3cd271cee739671e5a926d102a1f9f64c8f9a2074.exe
Resource
win7-20231129-en
General
-
Target
727b24253f1dc39e769d9ce3cd271cee739671e5a926d102a1f9f64c8f9a2074
-
Size
2.3MB
-
MD5
3ee47eebbb3fb2c673e2216a92041f66
-
SHA1
7ee6d3d0f0ee09a873aa43ec6ee7712c910d31ae
-
SHA256
727b24253f1dc39e769d9ce3cd271cee739671e5a926d102a1f9f64c8f9a2074
-
SHA512
4113d4f612e7b93f7765184fc4b5e39a02cbae17defbeba861edeebc4aef3548277d56e94b9032d287aac170556fadbdee8bc78a4d7ef0d0e3a929cebaa4e0b1
-
SSDEEP
49152:Tg69SebPPiKgYyGy9z9B1xU9qC03VzoPKMzjf4zMob+U1:Tg69Sebiky9pNxoP9zjsMob+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 727b24253f1dc39e769d9ce3cd271cee739671e5a926d102a1f9f64c8f9a2074
Files
-
727b24253f1dc39e769d9ce3cd271cee739671e5a926d102a1f9f64c8f9a2074.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yryoxkta Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqkabzem Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE