Static task
static1
Behavioral task
behavioral1
Sample
af60e68a31362204783c08bf16bdd5109cd68693e78b106a65c6537f065b3bfb.exe
Resource
win7-20240221-en
General
-
Target
af60e68a31362204783c08bf16bdd5109cd68693e78b106a65c6537f065b3bfb
-
Size
2.3MB
-
MD5
9af8f8becc44507318bc70e70a898488
-
SHA1
35bc91126a9d3380506a49b28c4e712e76cd2553
-
SHA256
af60e68a31362204783c08bf16bdd5109cd68693e78b106a65c6537f065b3bfb
-
SHA512
523d32b7be5de9883230c6bd8e92fe6520a8f4a524d6d049a603a7df31dca620aa453bedbb202315a2711f6567978abb3944a5de0d0482e414b99ea65ace625f
-
SSDEEP
49152:iwLngJabAlSPj0pky+POTItZ6oPBMek/CnFB6nQnOw7o7bc:i8nAa8+y+PaIVPT6Q0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af60e68a31362204783c08bf16bdd5109cd68693e78b106a65c6537f065b3bfb
Files
-
af60e68a31362204783c08bf16bdd5109cd68693e78b106a65c6537f065b3bfb.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pprgmubb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dmtwwdnb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE