Static task
static1
Behavioral task
behavioral1
Sample
0f34157a728e9e38bb1b525d81b77d14ddd9ce68acc4bf699afa3ecffc05f843.exe
Resource
win7-20240708-en
General
-
Target
0f34157a728e9e38bb1b525d81b77d14ddd9ce68acc4bf699afa3ecffc05f843
-
Size
1.8MB
-
MD5
5cc7d2156b755f4f25c95397f3205db8
-
SHA1
63af0669f218277577f1529cf22c037d731a08a5
-
SHA256
0f34157a728e9e38bb1b525d81b77d14ddd9ce68acc4bf699afa3ecffc05f843
-
SHA512
dde832825ed20d93c09839108a294872087467cd8aa33d6e9364a816d24162d78543527d2ca286794a1ab5b3fb8c495bbc057249c321166e400836ea93a5f377
-
SSDEEP
49152:xv6OYp+razuJmprULuyMJXgrdmyJlbA79X:hUWnJmpvyMIdVfbAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f34157a728e9e38bb1b525d81b77d14ddd9ce68acc4bf699afa3ecffc05f843
Files
-
0f34157a728e9e38bb1b525d81b77d14ddd9ce68acc4bf699afa3ecffc05f843.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zfwxalyg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eihgdphy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE