Static task
static1
Behavioral task
behavioral1
Sample
ba9d4c2bb10053f2d8ce043a44a3b98ee0f1a2380246e8ac3390434ab06afaf0.exe
Resource
win7-20240729-en
General
-
Target
ba9d4c2bb10053f2d8ce043a44a3b98ee0f1a2380246e8ac3390434ab06afaf0
-
Size
1.8MB
-
MD5
95f9719743a140f3c587bed67ed949c0
-
SHA1
d82f471bb79a8b92c15c7c84b0dea01ddf87b234
-
SHA256
ba9d4c2bb10053f2d8ce043a44a3b98ee0f1a2380246e8ac3390434ab06afaf0
-
SHA512
4e8bdaeaaf684f8612915c60a06e95779810c6a597ed0a4d9ad94165f99b80f1a172d1d84af048e6dcedb71c3e7a14751e1cba5d1b1e439bdf40d6b0dec11097
-
SSDEEP
49152:rIHdm1yJqNIjn8SVyixZN+QrHQqXyCWZMWJ0US:8xsNIj8SfxZN+QrxPRWiUS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba9d4c2bb10053f2d8ce043a44a3b98ee0f1a2380246e8ac3390434ab06afaf0
Files
-
ba9d4c2bb10053f2d8ce043a44a3b98ee0f1a2380246e8ac3390434ab06afaf0.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nazxxquh Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lhepssbn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE