Static task
static1
Behavioral task
behavioral1
Sample
929a07d2cea387dd4f1760e689c0814d0a9d22a3db3bffe147027c377c45d332.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
929a07d2cea387dd4f1760e689c0814d0a9d22a3db3bffe147027c377c45d332.exe
Resource
win10v2004-20240611-en
General
-
Target
929a07d2cea387dd4f1760e689c0814d0a9d22a3db3bffe147027c377c45d332
-
Size
1.8MB
-
MD5
7d9afc35fad93d00174000bf815c3981
-
SHA1
e35b98aea100d3e4001bc6868cca01fb0a2791d5
-
SHA256
929a07d2cea387dd4f1760e689c0814d0a9d22a3db3bffe147027c377c45d332
-
SHA512
77a9f022d3257d8df846d4fd18ee0b811b091ce60251ef36fd6514f856cb2eafc08aa946fbb575b1d147ea2500ec647234ee95383b964f3e3b31477eaf86a198
-
SSDEEP
49152:nT1D+jIw717LdIiS9vi9EqvJZ68P3yXJRHcST:T1ST711IiSofc4iX78
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 929a07d2cea387dd4f1760e689c0814d0a9d22a3db3bffe147027c377c45d332
Files
-
929a07d2cea387dd4f1760e689c0814d0a9d22a3db3bffe147027c377c45d332.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uzlflnwv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ugrbrdbs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE