Static task
static1
Behavioral task
behavioral1
Sample
0341c85ca79dd94606a80b217ccb3e60N.exe
Resource
win7-20240705-en
General
-
Target
0341c85ca79dd94606a80b217ccb3e60N.exe
-
Size
1.8MB
-
MD5
0341c85ca79dd94606a80b217ccb3e60
-
SHA1
8c62747c0170ffb2006b8152cde98bf254a685c4
-
SHA256
d64d4f34e806bfe57f907f4576c7d79ca36abca05e3884b1f1006dc93f55f07a
-
SHA512
afc2258f90fe4343f4af4a5d2f598958ccc83e6d58339693f9a0f03b3e31ce70ff3f9d927a4592c2e5537e2bd6bd7d0bf731efd5c56779a2378bf2676098ba91
-
SSDEEP
49152:FcOtBefrOlh5FVPANGemCDzK4Z8E0i/ppkSR/8Y:FWfrOlXANGemwzKTYpOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0341c85ca79dd94606a80b217ccb3e60N.exe
Files
-
0341c85ca79dd94606a80b217ccb3e60N.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wodzqtdx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtdravih Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE