Static task
static1
Behavioral task
behavioral1
Sample
b56415032f77ce72bc62958c29960462739f937d15cf177f943ef358c2ae5537.exe
Resource
win7-20240508-en
General
-
Target
b56415032f77ce72bc62958c29960462739f937d15cf177f943ef358c2ae5537
-
Size
6.3MB
-
MD5
1a7a604833a5c7a3ac6dd9aca2a511cf
-
SHA1
aba74d1416dbc2b0f23261c08b3a3317cd01c551
-
SHA256
b56415032f77ce72bc62958c29960462739f937d15cf177f943ef358c2ae5537
-
SHA512
a40a1608b5105817e71377da6b96dd61956302b00944ff8140494ea668f3ffb1cd9e3c7488f787ce5146ac9beaecd02c28877b464d2eaedb5c02e836100268ad
-
SSDEEP
196608:a0aoWqII18cYl/y/ZdElsECuduGeQKTlm:2oWqIIacY1ycs4duGZK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b56415032f77ce72bc62958c29960462739f937d15cf177f943ef358c2ae5537
Files
-
b56415032f77ce72bc62958c29960462739f937d15cf177f943ef358c2ae5537.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.9MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
clmourtd Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
phzdlmvs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE