Static task
static1
Behavioral task
behavioral1
Sample
408ec2f297ca4f88dab1b8e8b6a3b3063bbbb39c147250896d94973a0174322f.exe
Resource
win7-20240705-en
General
-
Target
408ec2f297ca4f88dab1b8e8b6a3b3063bbbb39c147250896d94973a0174322f
-
Size
1.8MB
-
MD5
ee699660904faa9c3ea4bfe538883d89
-
SHA1
5a6e8cfd177b7b8a5892c7d46e6b57d38d0b6278
-
SHA256
408ec2f297ca4f88dab1b8e8b6a3b3063bbbb39c147250896d94973a0174322f
-
SHA512
aff387da4bff7ff783a835246929e34cf5f0120fde0b01d738884168dafb89ef7132378a1c150458b63ea55703551f360a13d07f1bc42b15192a03a145378930
-
SSDEEP
49152:ybJLTcbyI2v880uXDwgZTD2u+zCkkyv4eNJa2IMkBcwXtL8Hrw/B:oN4Vq0uXEoTD9+z9kyZbsMc9yrwZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 408ec2f297ca4f88dab1b8e8b6a3b3063bbbb39c147250896d94973a0174322f
Files
-
408ec2f297ca4f88dab1b8e8b6a3b3063bbbb39c147250896d94973a0174322f.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
spgehbpb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
isqdjbev Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE