Static task
static1
Behavioral task
behavioral1
Sample
5a3148b0cdb207ca0cefe71c6f3ffa434f51fbb6660e96245406221cbac84c64.exe
Resource
win7-20240215-en
General
-
Target
5a3148b0cdb207ca0cefe71c6f3ffa434f51fbb6660e96245406221cbac84c64
-
Size
2.3MB
-
MD5
25bb9c7ebdc7d1fcf86e2971c867c8ea
-
SHA1
6b1f2b479e815f2f5ec08cca73d48d1b4dbe43a1
-
SHA256
5a3148b0cdb207ca0cefe71c6f3ffa434f51fbb6660e96245406221cbac84c64
-
SHA512
73d7dd725c8f9deafd27aba0a1c8de378b2003bd737c207befa039debf7365f57cb1f4fcfb9ecb43cf67568aef813b422ca83f40abff0d5bc547bb607358567a
-
SSDEEP
49152:I2ZAkmZWYS6LRGvlPTM5BCRkMs8/s40nxKiUdq/+oX1N:dEZnS6NiTcURkMsOsZ2E11
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a3148b0cdb207ca0cefe71c6f3ffa434f51fbb6660e96245406221cbac84c64
Files
-
5a3148b0cdb207ca0cefe71c6f3ffa434f51fbb6660e96245406221cbac84c64.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xmjmpdtu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fonbyzqh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE