Static task
static1
Behavioral task
behavioral1
Sample
90d378c0785e8fb983facbe8e52ff7b7e11d530a5f014ea5634a49014ed50ea5.exe
Resource
win7-20240708-en
General
-
Target
90d378c0785e8fb983facbe8e52ff7b7e11d530a5f014ea5634a49014ed50ea5
-
Size
1.8MB
-
MD5
2d3f8dfd62a495aeadb598e65edfa2b1
-
SHA1
ba5e098f6e9459fa2ad7dd9471763b2202162436
-
SHA256
90d378c0785e8fb983facbe8e52ff7b7e11d530a5f014ea5634a49014ed50ea5
-
SHA512
333041123b338adf1b4b282b91dd9d1597d485d56aaf8a38399b2afb88ee30e9b245800a395c88451251d0aa1ffe9df8ae4d8912015585f7ebfb6ee693e52c45
-
SSDEEP
49152:K/yOKbR/lSm+f/2wg4TmkybkekAs1uNE:K/yOTm+HOhbnkX1uK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90d378c0785e8fb983facbe8e52ff7b7e11d530a5f014ea5634a49014ed50ea5
Files
-
90d378c0785e8fb983facbe8e52ff7b7e11d530a5f014ea5634a49014ed50ea5.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
alezvjbd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xjkvocyk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE