Static task
static1
Behavioral task
behavioral1
Sample
747ad71951bbc28d848c175e17423a7c38e5b05ebdcc2a1143f45bc7f88f8379.exe
Resource
win7-20240704-en
General
-
Target
747ad71951bbc28d848c175e17423a7c38e5b05ebdcc2a1143f45bc7f88f8379.exe
-
Size
1.8MB
-
MD5
bee44c520f00c6bb04ef4333aae55860
-
SHA1
72aa29fb94b5c8206ba1b03770d1e5951c876dcf
-
SHA256
747ad71951bbc28d848c175e17423a7c38e5b05ebdcc2a1143f45bc7f88f8379
-
SHA512
4e4a23fda4fdfeca9c41d08a60d30132de4ec272ef11e8d6054542cc52b0eb3ddf71e41e1e5672995b5f99b7641577603c9353c4c98f746adc3a8111a8c2cc33
-
SSDEEP
49152:T2BOOFp6Ezld6Fyo+bfIv8y4rz/l0Vy9Kx68kl:T2BRbzld6F7B8b/l0Mm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 747ad71951bbc28d848c175e17423a7c38e5b05ebdcc2a1143f45bc7f88f8379.exe
Files
-
747ad71951bbc28d848c175e17423a7c38e5b05ebdcc2a1143f45bc7f88f8379.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxrstif Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rotoflms Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE