Static task
static1
Behavioral task
behavioral1
Sample
978652a9009414cf38edd7a8cb6387a654dc75b70f5522d4d0d375e01a5cb41a.exe
Resource
win7-20240221-en
General
-
Target
978652a9009414cf38edd7a8cb6387a654dc75b70f5522d4d0d375e01a5cb41a
-
Size
1.7MB
-
MD5
fe7e4a096f69688dc594ef1fe7a776fd
-
SHA1
c22b6ad72d67ce5ab7e985d2f61ac85abc96433a
-
SHA256
978652a9009414cf38edd7a8cb6387a654dc75b70f5522d4d0d375e01a5cb41a
-
SHA512
cda99e75120fbde09abb4822aecc0c81464770336b1c7b68903268bd80bece76068638d88de68f5b9c97df202de4a3924b9023ebea02b7b882a838a855131758
-
SSDEEP
49152:r1A5BYZiD/jw5N1giyMGHaqIwiU65yUUU8Am6GpoOpMp:r1gBKsSbbyNy0p9B+yo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 978652a9009414cf38edd7a8cb6387a654dc75b70f5522d4d0d375e01a5cb41a
Files
-
978652a9009414cf38edd7a8cb6387a654dc75b70f5522d4d0d375e01a5cb41a.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 880KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE