Static task
static1
Behavioral task
behavioral1
Sample
2897e36ac6e600fca006011728a59271be83633ed19124692b9efd4ed744aaa6.exe
Resource
win7-20240508-en
General
-
Target
2897e36ac6e600fca006011728a59271be83633ed19124692b9efd4ed744aaa6.exe
-
Size
5.1MB
-
MD5
130831c89b3cabb77fc462f3ee434605
-
SHA1
f52e2524765b21e2035aaf95260a57ab762f4d93
-
SHA256
2897e36ac6e600fca006011728a59271be83633ed19124692b9efd4ed744aaa6
-
SHA512
a3126c8f93cc0489e66c15dc4b173fee024bee87f68d1b2d6234eaff5d6678127855282735bd9586c27efd2b0942a16c93779a7303df2811e94f623cd206c6be
-
SSDEEP
98304:NB0iV2xqtRRKZ4g75Kftw+qvCXCwUpvCWEMS0fs+gf0nIj+X+vB:NnV2xGg75iZQCXpgQMSR+dmH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2897e36ac6e600fca006011728a59271be83633ed19124692b9efd4ed744aaa6.exe
Files
-
2897e36ac6e600fca006011728a59271be83633ed19124692b9efd4ed744aaa6.exe.exe windows:6 windows x86 arch:x86
9d119e2e17a860783c22ad990de068eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
oleaut32
SysAllocString
ole32
CoCreateInstance
user32
CloseClipboard
gdi32
BitBlt
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpªÐ Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmpªÐ Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpªÐ Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ