Static task
static1
Behavioral task
behavioral1
Sample
5264db25838247b1d56747e7152690dbc27ee42ff91e85a15f56f5d889f13cd5.exe
Resource
win7-20240220-en
General
-
Target
5264db25838247b1d56747e7152690dbc27ee42ff91e85a15f56f5d889f13cd5
-
Size
1.8MB
-
MD5
ec04f77c1b0c8668633d8c5f7d56eafb
-
SHA1
17153e4876e678d6d8a4229658f19f806b7c5fba
-
SHA256
5264db25838247b1d56747e7152690dbc27ee42ff91e85a15f56f5d889f13cd5
-
SHA512
228833bff03c7f683fd5b47df6f13e83e10f99b5163c1c64c0b1bf2c5f1dc9f56ed5448a2e7ba455fa9eae539f1c6a0b1827f0598f454319a7ce2fa4660eb924
-
SSDEEP
24576:J3J1OaB2z70D5aUbPzJKYx4ZvNVRDbpTg6FPXEunf0Z/xVR2VnprLj1RUW+i19+h:lLzB2z7YjKIEff7suIHR6ZdrRc0xyK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5264db25838247b1d56747e7152690dbc27ee42ff91e85a15f56f5d889f13cd5
Files
-
5264db25838247b1d56747e7152690dbc27ee42ff91e85a15f56f5d889f13cd5.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
moutlive Size: 1.6MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jmysohtn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE