Static task
static1
Behavioral task
behavioral1
Sample
7dbe77fe18f5636df2fc5869e40c38de100123273ae464c9929bd1f57704f969.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7dbe77fe18f5636df2fc5869e40c38de100123273ae464c9929bd1f57704f969.exe
Resource
win10-20240404-en
General
-
Target
7dbe77fe18f5636df2fc5869e40c38de100123273ae464c9929bd1f57704f969
-
Size
1.8MB
-
MD5
ffc05e2526d75156dedfc82180de5d20
-
SHA1
57acc1b3d60803aacb726124a6f5ad5fdd0b13a2
-
SHA256
7dbe77fe18f5636df2fc5869e40c38de100123273ae464c9929bd1f57704f969
-
SHA512
bf6a99d9241d07f42ded9627b2f328b36b675d8c398ac86bac9cc6b886b7f6a0bb816d888506af16cb3742605a1c422ede2141415c0fdc54f8ddf9f988d13de5
-
SSDEEP
49152:3kKaCYXUrE7BJ2553LPpB5I+ymtxl4yQRPRXq6sOXjQ5:323krE7BJ2r7P9v9x8pXXRzQ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7dbe77fe18f5636df2fc5869e40c38de100123273ae464c9929bd1f57704f969
Files
-
7dbe77fe18f5636df2fc5869e40c38de100123273ae464c9929bd1f57704f969.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rvzzrqmj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kylbxksh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE