Static task
static1
Behavioral task
behavioral1
Sample
f59720e21d7c3ce0b6c7bcebfdc154e1157161c9d56d992ab31a7fa11338fcee.exe
Resource
win7-20240729-en
General
-
Target
f59720e21d7c3ce0b6c7bcebfdc154e1157161c9d56d992ab31a7fa11338fcee
-
Size
1.8MB
-
MD5
1d39b9bbeb221fcfbeb0985e76c2d69d
-
SHA1
2f3591724de8e3854605cb7c16eebeab89a4a042
-
SHA256
f59720e21d7c3ce0b6c7bcebfdc154e1157161c9d56d992ab31a7fa11338fcee
-
SHA512
4eae05ce0ccc6304193040ce3a8f9707147145122b9c3b65e977e736cc9bec4c22de7a99aa3fc5fb31914810ee0443e3a3dfe3b7394f631b1a76d48816ed15af
-
SSDEEP
49152:4HxkAULYB7gkUuu8CbtvHPcX8Vyv8dUaOaxs6kGQzBUZKFqA0AUPw:4HmA9Guu8C9PcMVFdNO/6uhKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f59720e21d7c3ce0b6c7bcebfdc154e1157161c9d56d992ab31a7fa11338fcee
Files
-
f59720e21d7c3ce0b6c7bcebfdc154e1157161c9d56d992ab31a7fa11338fcee.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ojgxxmzg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gkqhsbpd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE