Static task
static1
Behavioral task
behavioral1
Sample
374810fd8f1bd6a56f38e0613f82ea7f63fa61811637721c9fd54b2e0e31e139.exe
Resource
win7-20240508-en
General
-
Target
374810fd8f1bd6a56f38e0613f82ea7f63fa61811637721c9fd54b2e0e31e139.exe
-
Size
2.4MB
-
MD5
6c5eff575235162e48d1343214977dec
-
SHA1
1597edde9b1ab8de3ca73845383e7893af21d44a
-
SHA256
374810fd8f1bd6a56f38e0613f82ea7f63fa61811637721c9fd54b2e0e31e139
-
SHA512
999c85c8aba083e8064c63f59a544f9ea222f3794ad4fb9d9246c3c2fc2fe0aa65be48eb6d12d6e7d9a829156752f8a8540f69819de200161413c28fc6d6bb0b
-
SSDEEP
49152:OfNYyhPNfMGphcnhnWAP6rPFxI2gimRzw4ti3C0rKVstXpW:wXWBoPFAimfi3CZVsV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374810fd8f1bd6a56f38e0613f82ea7f63fa61811637721c9fd54b2e0e31e139.exe
Files
-
374810fd8f1bd6a56f38e0613f82ea7f63fa61811637721c9fd54b2e0e31e139.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fcxpinko Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvfxtwlq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE