Static task
static1
Behavioral task
behavioral1
Sample
91ad4f0a45695028bfe1be57014cbba44d8d24b956e30ec0498a2ef24497c88a.exe
Resource
win7-20240508-en
General
-
Target
91ad4f0a45695028bfe1be57014cbba44d8d24b956e30ec0498a2ef24497c88a
-
Size
2.4MB
-
MD5
07a466d0567c6defcf54e9df3010278d
-
SHA1
478c2ace921bf20b8e7c6b381db5cbdc68e8e518
-
SHA256
91ad4f0a45695028bfe1be57014cbba44d8d24b956e30ec0498a2ef24497c88a
-
SHA512
fdb31104e7fda41eb55e67332c6933b51505fc416325968130bacb4c0cf53c7ad8964ea0dc978ca57dc0c8b743347482fff37b45957166e16cee5c8bcccfbf21
-
SSDEEP
49152:BfNYyhPNfMGphcnhnEBnDKu5q32O5uX5WLUxob9x/Cf:FXWKB2GuuZoZx2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91ad4f0a45695028bfe1be57014cbba44d8d24b956e30ec0498a2ef24497c88a
Files
-
91ad4f0a45695028bfe1be57014cbba44d8d24b956e30ec0498a2ef24497c88a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rohrgvck Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ncfajcjp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE