Behavioral task
behavioral1
Sample
443f4549a883ffa062d9ddea92040980N.exe
Resource
win7-20240705-en
General
-
Target
443f4549a883ffa062d9ddea92040980N.exe
-
Size
118KB
-
MD5
443f4549a883ffa062d9ddea92040980
-
SHA1
73572c3ecf7909d403804657d147318ed2a04c80
-
SHA256
84eb2e13dbd80ac45c5e5954d8072c338f2f817dfb21a1a33d12f104a91f4b04
-
SHA512
c4a631e66ee18bdde6bc249d4172114a387b1c79098516ecbee958bef9cf6e1f04b2295b89924469aa836ffc5626e356eb0d1964c8ec321adb7dade6e6da7df6
-
SSDEEP
1536:ud9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZinzOGP97Hm11:2dseIOMEZEyFjEOFqTiQmQnzX7Hm11
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Signatures
Files
-
443f4549a883ffa062d9ddea92040980N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE