Static task
static1
Behavioral task
behavioral1
Sample
03f38b8fa78735ad858960d1de975f2f.exe
Resource
win7-20240221-en
General
-
Target
03f38b8fa78735ad858960d1de975f2f.exe
-
Size
2.4MB
-
MD5
03f38b8fa78735ad858960d1de975f2f
-
SHA1
99f7d7eba4eca586548a5b301e6b69a46ddcfe80
-
SHA256
6a845dde74086e4e06ad25bcb08d3fbd66c7e5f6db3bf83ed3290a3a5583eb5c
-
SHA512
c7def3b43c93d9bf379a8e30e2b58d142521d5ec11140ef1dfdb58faf2103161d2ed0161c8dd622040aa617c8b1ac8f0783d3d30201361d8869ef3e613e17180
-
SSDEEP
49152:jTs9zpYo556eURBCuyUsmNxyRrUiKdu1qXW2ZhsefuV9B:j49SoqrRBClmfyRrJlras+u/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f38b8fa78735ad858960d1de975f2f.exe
Files
-
03f38b8fa78735ad858960d1de975f2f.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oxtkfehm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wcqqlyvu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE