Static task
static1
Behavioral task
behavioral1
Sample
86f6731ed405304ad670307b21e25969d2e43121e5d5507c700d4a9a9747affa.exe
Resource
win7-20240704-en
General
-
Target
86f6731ed405304ad670307b21e25969d2e43121e5d5507c700d4a9a9747affa
-
Size
1.8MB
-
MD5
8074c0e86b1d085689f32385f9fe44be
-
SHA1
70e10cd37ae52b5e882e378cbf8beb92fdaa7215
-
SHA256
86f6731ed405304ad670307b21e25969d2e43121e5d5507c700d4a9a9747affa
-
SHA512
cd29c346415882976728fd65afa989c29570708dffd73e1cae601bf5ab3a2d767aa7460ce7190f63e5e23d0c5e8fa8362eebf940ba459347bcd0135317b51fb7
-
SSDEEP
49152:y7KLKmOjQcAXOJ6ncH4pCMF4VildaXMj2ft/Z:y7KwDLiwTMF48raXMj2f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86f6731ed405304ad670307b21e25969d2e43121e5d5507c700d4a9a9747affa
Files
-
86f6731ed405304ad670307b21e25969d2e43121e5d5507c700d4a9a9747affa.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tsnrwrqn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhrzxemc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE