Static task
static1
Behavioral task
behavioral1
Sample
f993f26f3db27f920936db8213fbce101607d4ccf7407f99b32f08201d8b320d.exe
Resource
win7-20240419-en
General
-
Target
f993f26f3db27f920936db8213fbce101607d4ccf7407f99b32f08201d8b320d
-
Size
2.3MB
-
MD5
5288667b3b280799db8fda4854e31ff3
-
SHA1
252a701a5957e1d25c9458ef65f2c96c19e196d1
-
SHA256
f993f26f3db27f920936db8213fbce101607d4ccf7407f99b32f08201d8b320d
-
SHA512
bf1c18dbdf0f421acb19ba651101e573773c7784238c18ac12651fa1511554f5f3b82c869008af73da03261a458b5d25df4a9a97e0702c5c9048e0ab1638a24b
-
SSDEEP
49152:CTs9zpYo556eURBCmO0+VHT/y1XnXN2CJ0mGO7E+RyFaFfaS+g:C49SoqrRBCmO0ke1oFt89bfaE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f993f26f3db27f920936db8213fbce101607d4ccf7407f99b32f08201d8b320d
Files
-
f993f26f3db27f920936db8213fbce101607d4ccf7407f99b32f08201d8b320d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbagxxel Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nfuxgoxu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE