Static task
static1
Behavioral task
behavioral1
Sample
37471206e1fded92d8513a747f7dafa4.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
37471206e1fded92d8513a747f7dafa4.exe
Resource
win10v2004-20240419-en
General
-
Target
37471206e1fded92d8513a747f7dafa4.exe
-
Size
2.3MB
-
MD5
37471206e1fded92d8513a747f7dafa4
-
SHA1
2a783b73a310d0a0600539e50abd77c03a5ff0d4
-
SHA256
df72563cd0126b9e0f040bbd454332e9dc7140b6aab7a277981475ec5052e98f
-
SHA512
0a24259905a8b2048b3abe7600b6e0bf84b24ca5d284aea5efcc749840811d3929c5baad7047fe87580a47431027a473ce4802422405a140fc4dd7ee3feb11db
-
SSDEEP
49152:lGY5918NqwTEgTcQNqzyw1OsgDcaCBs4nMO3fQelua5bviTCk:ahTPQzyoXgwXbndPlJiu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37471206e1fded92d8513a747f7dafa4.exe
Files
-
37471206e1fded92d8513a747f7dafa4.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jaihxoyy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vypfwgmz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE