Static task
static1
Behavioral task
behavioral1
Sample
d2f0cbae8d701bb646c9a59e8843b488cf02aecf66da27b4df518c8ebcfb6f8e.exe
Resource
win7-20240220-en
General
-
Target
d2f0cbae8d701bb646c9a59e8843b488cf02aecf66da27b4df518c8ebcfb6f8e
-
Size
7.7MB
-
MD5
3629f59708d7ce1c42866b4426ffd5c7
-
SHA1
9e3056c836801f23b8e23f87df7f2ca09d767223
-
SHA256
d2f0cbae8d701bb646c9a59e8843b488cf02aecf66da27b4df518c8ebcfb6f8e
-
SHA512
3748bb55dbd98fc62bec65aedc4483eda3f43c3dbe5d9600a728cb37dc590f9d90a9b0cfa9fd43ddccc7728d86677feddf6444c2956cdb0d66920cf5ab70ee9d
-
SSDEEP
196608:YpND0JDClEWbt0OrsFq1Db8XuJZ15Qb4jayeYz:Y08EC/sFq1H8ODs4jaq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2f0cbae8d701bb646c9a59e8843b488cf02aecf66da27b4df518c8ebcfb6f8e
Files
-
d2f0cbae8d701bb646c9a59e8843b488cf02aecf66da27b4df518c8ebcfb6f8e.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 903KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 10.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sotvqhry Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gwernwpz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE