Static task
static1
Behavioral task
behavioral1
Sample
84d35d58bc6e48d4a105a39737e0e19a9cc0f628f80b2c8fc2d8c4161e8182ba.exe
Resource
win7-20240508-en
General
-
Target
84d35d58bc6e48d4a105a39737e0e19a9cc0f628f80b2c8fc2d8c4161e8182ba
-
Size
1.8MB
-
MD5
eae382a2117d11780a3a6afef25ae116
-
SHA1
0b26db66b8ed50aaf3649ddcf0cb30d12b42a831
-
SHA256
84d35d58bc6e48d4a105a39737e0e19a9cc0f628f80b2c8fc2d8c4161e8182ba
-
SHA512
e4145cdc69c7dbf8dc9f375f07100ce1a9d8e7797fd0d60b71ae144f9b27852fbe2d4a87ca5ebff2ab7223731bbb9848dc224d797a6327386c71c5b8f1b554af
-
SSDEEP
24576:UF97iR5o14TYYayiicqK4qBeLLtrgEi8HPwqJgR6ijwzJLQ7QPr7tB4o7Mibjwml:a90jGtFVBeNtvgoLKIt++OMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84d35d58bc6e48d4a105a39737e0e19a9cc0f628f80b2c8fc2d8c4161e8182ba
Files
-
84d35d58bc6e48d4a105a39737e0e19a9cc0f628f80b2c8fc2d8c4161e8182ba.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bcbdesco Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sncrazxq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE