Static task
static1
Behavioral task
behavioral1
Sample
7e5fbac8a474b8082983455af8102f63b20606b6c85287c4fd5766c9cb673b45.exe
Resource
win7-20240708-en
General
-
Target
7e5fbac8a474b8082983455af8102f63b20606b6c85287c4fd5766c9cb673b45
-
Size
1.8MB
-
MD5
2823c875bca3fe7550bfe5ca70b94ef1
-
SHA1
ccf3255d4fbde389c7de5a1acbf782257f354cba
-
SHA256
7e5fbac8a474b8082983455af8102f63b20606b6c85287c4fd5766c9cb673b45
-
SHA512
04f4e84b03d37b9d0710378848e340819fbb570922bbe3f61a0c677d260b4c2e49bb13491b3703457ffcdcd95b3611118d3f4ff1e57b9eb4dc985f77c0d3b2fb
-
SSDEEP
49152:NJHBRgsV055BgRlTYzeZMtEevhXX3qjir0yt:NJh+scSRlUzey+evhXnqB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e5fbac8a474b8082983455af8102f63b20606b6c85287c4fd5766c9cb673b45
Files
-
7e5fbac8a474b8082983455af8102f63b20606b6c85287c4fd5766c9cb673b45.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zpzyxyvd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xreldcet Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE