Static task
static1
Behavioral task
behavioral1
Sample
971b796caa3146d53c8af2c26dce100ade67daa3980145b4b59c471cd5f68707.exe
Resource
win7-20240708-en
General
-
Target
971b796caa3146d53c8af2c26dce100ade67daa3980145b4b59c471cd5f68707
-
Size
6.1MB
-
MD5
dd07b0e1a02c37f543ba11b5ddb1faae
-
SHA1
3990b30daf289858d5f6a49e174bdf3758214c57
-
SHA256
971b796caa3146d53c8af2c26dce100ade67daa3980145b4b59c471cd5f68707
-
SHA512
5781d4e3b2a39621b3e2c4d939553d307e9bfad9527d9138e5b8ae8e5a87f4fa4917ee5896ef9cdf831d2da3d7f58ae5e9265c3a97cbcd513ca34178dacc85d9
-
SSDEEP
98304:ILLiuBD6tDkbDN7pfHyZ9f/p/u4EjYVOdAdMvNB7zFy:tuBmY3vk9p//E0nMvN5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 971b796caa3146d53c8af2c26dce100ade67daa3980145b4b59c471cd5f68707
Files
-
971b796caa3146d53c8af2c26dce100ade67daa3980145b4b59c471cd5f68707.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wufdfuri Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
powfqrpq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE