Static task
static1
Behavioral task
behavioral1
Sample
f4cf972ead7b965593806826e788f556597b638b23b905dc429b5c767c8c95e0.exe
Resource
win7-20240708-en
General
-
Target
f4cf972ead7b965593806826e788f556597b638b23b905dc429b5c767c8c95e0
-
Size
1.9MB
-
MD5
33c8493c27de27a6b03fb82add799bc7
-
SHA1
c9791d0f8cafedd121af0eb865e9b4f429d77987
-
SHA256
f4cf972ead7b965593806826e788f556597b638b23b905dc429b5c767c8c95e0
-
SHA512
eaa406325de953ef9326647ad1050cca674ef7c28c9ff2e7daf1445c99a1d54dc0100ad8ecf6e80b863eefa8e1394e8c2c83f9a642fab094cc5ee7edb376eb9d
-
SSDEEP
49152:w0mpXM7bPHVBW4i1ycVsqJ2/uL7sK0u2TowT+0DnSZOZLUH:aZOVoPEcVX22sauB/S/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4cf972ead7b965593806826e788f556597b638b23b905dc429b5c767c8c95e0
Files
-
f4cf972ead7b965593806826e788f556597b638b23b905dc429b5c767c8c95e0.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wobzpjrw Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pizxvfkd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE