Static task
static1
Behavioral task
behavioral1
Sample
ff1820e68a7067ef6ad78ea9c19b929eb52729f85e349f75e226615ea72532f2.exe
Resource
win7-20240705-en
General
-
Target
ff1820e68a7067ef6ad78ea9c19b929eb52729f85e349f75e226615ea72532f2
-
Size
1.7MB
-
MD5
ed4b71ce3a1015b4ed6f7a01d773bf79
-
SHA1
6ac7d433cc2273abcbd58e06001416751867b216
-
SHA256
ff1820e68a7067ef6ad78ea9c19b929eb52729f85e349f75e226615ea72532f2
-
SHA512
e57bd229930ee2a98ee4c55d5592a11bafb92bf55cd6e313d3221a74007c1d84fbf37ef9f2f79a861b9c8fee81dd336fe6fa6b5e75a71b58ecbb66e2247b6ced
-
SSDEEP
24576:vL1tVXqjlrFwTsILihRQlTIUnb3UQ3CY2aIQ8zanpOBfbVZ5TBiL+I1MB2Qs/e9u:zHCraxOXcs6bUY2epOBfblTBK+9c1a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff1820e68a7067ef6ad78ea9c19b929eb52729f85e349f75e226615ea72532f2
Files
-
ff1820e68a7067ef6ad78ea9c19b929eb52729f85e349f75e226615ea72532f2.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 79KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eefoxtht Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmkgoacx Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE