Static task
static1
Behavioral task
behavioral1
Sample
82e3db4296097d6fa787d38a7f38329d4febd0ac1fcb36b60a1730ae29d6a04c.exe
Resource
win7-20240704-en
General
-
Target
82e3db4296097d6fa787d38a7f38329d4febd0ac1fcb36b60a1730ae29d6a04c
-
Size
1.8MB
-
MD5
fe71c9be7ee040f46c01fd8ed48c8234
-
SHA1
8cab35168ac87a3bb073810607943b6215dd03e0
-
SHA256
82e3db4296097d6fa787d38a7f38329d4febd0ac1fcb36b60a1730ae29d6a04c
-
SHA512
4e136bede2ea4b189b42c0c0494b6031842fb749fe1dd38237fbc68bc1f75f2526a050f43c4c5af0921f1b4b086e23e7c7c76111bbbd9f6638ac54c280e77460
-
SSDEEP
49152:0Ih3ZkLOnTcf5XBVU8a8hyTWYEaojPYhXLAgu:0IXuYTcfJBVO8YERPwN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82e3db4296097d6fa787d38a7f38329d4febd0ac1fcb36b60a1730ae29d6a04c
Files
-
82e3db4296097d6fa787d38a7f38329d4febd0ac1fcb36b60a1730ae29d6a04c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ekqzsxug Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wrvxaecf Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE