Static task
static1
Behavioral task
behavioral1
Sample
7182b646dab62a800309e5aae1e08f10cdd4612d3c68b33b409e6fb2dc7acbb7.exe
Resource
win7-20240903-en
General
-
Target
7182b646dab62a800309e5aae1e08f10cdd4612d3c68b33b409e6fb2dc7acbb7
-
Size
3.6MB
-
MD5
c4480e10eeec96364de556a4c2db1520
-
SHA1
dfd41f48e35a1923e7dac4de97acfa6757246fb4
-
SHA256
7182b646dab62a800309e5aae1e08f10cdd4612d3c68b33b409e6fb2dc7acbb7
-
SHA512
b479643639050b7f4bb4acb0b1620e255d8a809d43dc8065305408c7303d2e3ab7c15dc4cc5791b42cb09e2cfd0bcd5c74fb9ab4705943afe694ba9a170c9d45
-
SSDEEP
98304:J8a2JHbb8bomfcLOuza1TS/DDJAxn/r2XAWL99qZjGMaO:2RJHv8bfcLUQ/DDEybL99OSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7182b646dab62a800309e5aae1e08f10cdd4612d3c68b33b409e6fb2dc7acbb7
Files
-
7182b646dab62a800309e5aae1e08f10cdd4612d3c68b33b409e6fb2dc7acbb7.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 874KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 944KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hulfyzgw Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jltmwein Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE