Static task
static1
Behavioral task
behavioral1
Sample
951d9f6c539b26b74dbf17033a7a6d62edd2cd6af7fbd79da023bcdf30770787.exe
Resource
win7-20240221-en
General
-
Target
951d9f6c539b26b74dbf17033a7a6d62edd2cd6af7fbd79da023bcdf30770787
-
Size
1.8MB
-
MD5
93338c2f6145798dfafcee30c199e20f
-
SHA1
5b7d99b4c1d83ff9ee31bc4c548c32b80f976597
-
SHA256
951d9f6c539b26b74dbf17033a7a6d62edd2cd6af7fbd79da023bcdf30770787
-
SHA512
b9596186abd820f85c2e72a6354bea9ab323ed75f4bfd7a815e8afebc5e25611e246948d7ed22bac934a114c9a309defeff149747751195ca98db24846e735cf
-
SSDEEP
49152:JaDmc7gRoXqaNbUcoqFGax4koKkekln1FP3j4gV:JdXRoXqU4vax4kogkVbzBV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 951d9f6c539b26b74dbf17033a7a6d62edd2cd6af7fbd79da023bcdf30770787
Files
-
951d9f6c539b26b74dbf17033a7a6d62edd2cd6af7fbd79da023bcdf30770787.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yiiugelh Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
chgbwdsd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE