Static task
static1
Behavioral task
behavioral1
Sample
0a6ca6fb34dbed260495e1c33a48b16ab2acec174757b6fbaed599784cf1f9c0.exe
Resource
win7-20240708-en
General
-
Target
0a6ca6fb34dbed260495e1c33a48b16ab2acec174757b6fbaed599784cf1f9c0.exe
-
Size
1.7MB
-
MD5
8b1151e7b362b6306af51d9295aad9b6
-
SHA1
cb89435fc0dad068171dd04f06d35516f1d31572
-
SHA256
0a6ca6fb34dbed260495e1c33a48b16ab2acec174757b6fbaed599784cf1f9c0
-
SHA512
2a8f08fcf4ddeb265e8e56e8b23e23521ecc3046deeecc4b31da5f3d2514b172d71fba8c639c682fca1de4d58d150392e60c94333b8535cef98f6666e669a7c7
-
SSDEEP
49152:htVuhrM7s62x1KpiCfjpPZczUNhJZordNK:h/Lz2xEpdbpRcz+Irb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a6ca6fb34dbed260495e1c33a48b16ab2acec174757b6fbaed599784cf1f9c0.exe
Files
-
0a6ca6fb34dbed260495e1c33a48b16ab2acec174757b6fbaed599784cf1f9c0.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 79KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uoafiitq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wvbhqnhv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE