Static task
static1
Behavioral task
behavioral1
Sample
a7cd90120b3143b87f75c7095d42f8d700fc32c4329e63192247f170b8d81bb2.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
a7cd90120b3143b87f75c7095d42f8d700fc32c4329e63192247f170b8d81bb2.exe
Resource
win11-20240508-en
General
-
Target
a7cd90120b3143b87f75c7095d42f8d700fc32c4329e63192247f170b8d81bb2
-
Size
1.8MB
-
MD5
90c82e2841e84d6b6e1df91c0ef275a2
-
SHA1
066e88ac250a1993cb0c0332e4699d07a03ed011
-
SHA256
a7cd90120b3143b87f75c7095d42f8d700fc32c4329e63192247f170b8d81bb2
-
SHA512
c38aec26e100a06455d2a33e2e2605d74372f5723ce6d2131df2384d22cd97041e82120674fa587f0e282c4cd4f24a57936a71068cf0ef6af99ff7d6a8b7d063
-
SSDEEP
49152:8bz51PCPXpbJJSMGlgjkTTOf5S24vDUNNX+:QzHPCPXpbJVv4POhS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7cd90120b3143b87f75c7095d42f8d700fc32c4329e63192247f170b8d81bb2
Files
-
a7cd90120b3143b87f75c7095d42f8d700fc32c4329e63192247f170b8d81bb2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bkgdxvfg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crymagyg Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE