Static task
static1
Behavioral task
behavioral1
Sample
7326666bbd17beb98568820a10d9096d9442f5d3e7a7aa06e822d6322711ca7b.exe
Resource
win10v2004-20240508-en
General
-
Target
7326666bbd17beb98568820a10d9096d9442f5d3e7a7aa06e822d6322711ca7b
-
Size
1.9MB
-
MD5
e5426f582b92e86692ddd2de537fc008
-
SHA1
f65260cb69495bd3a58e0494df80b28ece315791
-
SHA256
7326666bbd17beb98568820a10d9096d9442f5d3e7a7aa06e822d6322711ca7b
-
SHA512
0cbac4358cc0ed09cecb9730756a38a6a8529768da152364e46ba07ffcabeeb2071499062833ceeecc0166757f057e8c6a437d74cda02aefd883ee22fb75b66a
-
SSDEEP
49152:Rv1OWcNm3xQNtxy7DgyVcRGCBKWhPgsbSBp6h5bk:t1OWpxQtJJGCzhP3bSrS5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7326666bbd17beb98568820a10d9096d9442f5d3e7a7aa06e822d6322711ca7b
Files
-
7326666bbd17beb98568820a10d9096d9442f5d3e7a7aa06e822d6322711ca7b.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pobphfxf Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bqszllwy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE