Static task
static1
Behavioral task
behavioral1
Sample
084800c626f90e58920b53ca94a585e2f7cec8408c77209d239ad77069a413d4.exe
Resource
win7-20240215-en
General
-
Target
084800c626f90e58920b53ca94a585e2f7cec8408c77209d239ad77069a413d4
-
Size
2.3MB
-
MD5
75a3c026d0108fcaa4f57e95b20dba00
-
SHA1
a7309b12507fc5932d561d9c0c9256ac14b2dd5e
-
SHA256
084800c626f90e58920b53ca94a585e2f7cec8408c77209d239ad77069a413d4
-
SHA512
b4b46e261150e72428890ee6ad57237ee8e1fd90fc36a51d97a8a74ffa98ae8927aa9f8b04329c402766cc4bab4d49e76bdd546787703c269a095e3d10c1ed90
-
SSDEEP
49152:wGY5918NqwTEgTcBZhEUMrqJctJlGuwTi0cuK9gmuw3/oAE3uX:BhTk7EscJ7WAO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084800c626f90e58920b53ca94a585e2f7cec8408c77209d239ad77069a413d4
Files
-
084800c626f90e58920b53ca94a585e2f7cec8408c77209d239ad77069a413d4.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zxqxngcp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
trnpzbpd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE