Static task
static1
Behavioral task
behavioral1
Sample
cedf2e58ba5822232440004f61c56e2ccc5fa6896d083fd1660d1dc84f3454e1.exe
Resource
win7-20240221-en
General
-
Target
cedf2e58ba5822232440004f61c56e2ccc5fa6896d083fd1660d1dc84f3454e1
-
Size
2.3MB
-
MD5
30e62fd09ffde22d6e36875eb508cbaf
-
SHA1
34aa03b5bce0aa30c2f8416afb47c9a772d69aee
-
SHA256
cedf2e58ba5822232440004f61c56e2ccc5fa6896d083fd1660d1dc84f3454e1
-
SHA512
1f833b32bfcbca800d248be630504f387a41f362f05e70cc788116f12395c7bb1e7539ee22b2d075ffb838222fc8d52f4a48498aef14199c91dc3f58e20b7d9a
-
SSDEEP
49152:wLdz1amRzM/VpgRyCBqFRRtCT1dvJTTr4mKP6U8mgKB7AMUiXi++8/LSBiLMo:ov9YpgoCITRtSTTr4j8mgy5dRLSBPo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cedf2e58ba5822232440004f61c56e2ccc5fa6896d083fd1660d1dc84f3454e1
Files
-
cedf2e58ba5822232440004f61c56e2ccc5fa6896d083fd1660d1dc84f3454e1.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ufqziotw Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bkkonaen Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE