Static task
static1
Behavioral task
behavioral1
Sample
7eb8d392af89a44282259805625d8ceb4707783ab8222b3ad6e7b95478126760.exe
Resource
win7-20240508-en
General
-
Target
7eb8d392af89a44282259805625d8ceb4707783ab8222b3ad6e7b95478126760
-
Size
2.3MB
-
MD5
d6c16e0e35713c96649d2f9f4b654b0c
-
SHA1
7971de709a298051ba0f669c94cd2c9e466021ba
-
SHA256
7eb8d392af89a44282259805625d8ceb4707783ab8222b3ad6e7b95478126760
-
SHA512
3ecba3535f969be64c4f48e531cf05d25890bb0c904c8e90fc630ca8a9f74334ec013646db2d002a70a4428c18bcba4b7ec870d3a5b11bab4270389d1a2b76df
-
SSDEEP
49152:joQgWv5hcS2R1yKlPFtjE4LBe+LllBAI3DKBuBU8rX:jtNHGnFtjfgAJKfG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7eb8d392af89a44282259805625d8ceb4707783ab8222b3ad6e7b95478126760
Files
-
7eb8d392af89a44282259805625d8ceb4707783ab8222b3ad6e7b95478126760.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
deebzdbf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
etzdaxvx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE