Static task
static1
Behavioral task
behavioral1
Sample
80dca1dc180d5a09a2f0a5ac64cebab739d0eac98c6118e18664c17d4d677894.exe
Resource
win7-20240708-en
General
-
Target
80dca1dc180d5a09a2f0a5ac64cebab739d0eac98c6118e18664c17d4d677894
-
Size
1.8MB
-
MD5
2c715aa2f4a81366b7f817e2b1588aa1
-
SHA1
4855c62e3264d71a2389a032e8747cb3de9f6062
-
SHA256
80dca1dc180d5a09a2f0a5ac64cebab739d0eac98c6118e18664c17d4d677894
-
SHA512
08cce83e14ac4a52ceaacc499b04e6507fbf498a99b16b4c357fe3e1edc899c518022fa496c5a7383c0720ab24e122f9775a2791bef90ee8072b3d7e06cf55f6
-
SSDEEP
49152:+sMJ1+0hCrw3D88DyqEy7UcxttlTH30M9Wk:qM0KcXyqEmUkL9Hj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80dca1dc180d5a09a2f0a5ac64cebab739d0eac98c6118e18664c17d4d677894
Files
-
80dca1dc180d5a09a2f0a5ac64cebab739d0eac98c6118e18664c17d4d677894.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qdfqtmnr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asqqzpdc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE