Static task
static1
Behavioral task
behavioral1
Sample
cfe496c5813703894d35a50a2159969065b6184ac7e99571cf0bfad799ab61f6.exe
Resource
win7-20240708-en
General
-
Target
cfe496c5813703894d35a50a2159969065b6184ac7e99571cf0bfad799ab61f6.exe
-
Size
1.7MB
-
MD5
f209de8ec57804d52f1629fc0799fdcc
-
SHA1
b4118c28b2b72114d973db5d80392934dfda4d09
-
SHA256
cfe496c5813703894d35a50a2159969065b6184ac7e99571cf0bfad799ab61f6
-
SHA512
4f785f7f1b0bea1f3f331e7ac8b06a82933c623fcc721626200bad642ea24682c6d578cd64748fea7d801668ad88b677fe64c14dc6fcfc9a683bf3c07edfb8cc
-
SSDEEP
49152:yfoaGSbpaO8h6nM7oWmPcrmX07Aqimp+5+rUx7Eb:4NoO8BnmUr808hm84rUx7A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfe496c5813703894d35a50a2159969065b6184ac7e99571cf0bfad799ab61f6.exe
Files
-
cfe496c5813703894d35a50a2159969065b6184ac7e99571cf0bfad799ab61f6.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 79KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wnoydiwf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gvjzrncw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE