Static task
static1
Behavioral task
behavioral1
Sample
3fe85d59070fd611096ef7d4dbc52c96c4a47e6208fc5388ac7b30ea47a38a99.exe
Resource
win7-20240903-en
General
-
Target
3fe85d59070fd611096ef7d4dbc52c96c4a47e6208fc5388ac7b30ea47a38a99
-
Size
1.9MB
-
MD5
44386001817bb87a58bdf751b576480b
-
SHA1
eb827f92a75b72c5284797ff2442240e253eb2d7
-
SHA256
3fe85d59070fd611096ef7d4dbc52c96c4a47e6208fc5388ac7b30ea47a38a99
-
SHA512
2139a6dcf95cbf47c991a9ecd31448a2b95cd3bf909d4930fe0fcc251570a254589a94e241ed3b38a9b6a7b6cae97608fdf1f9e1c3c10f137132649fb161cd28
-
SSDEEP
49152:Q6k/ppKUIy7e4f55JYRMRop3scDvvDZM9NhgWxx:aps11QCRh3pDDGjhg8x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fe85d59070fd611096ef7d4dbc52c96c4a47e6208fc5388ac7b30ea47a38a99
Files
-
3fe85d59070fd611096ef7d4dbc52c96c4a47e6208fc5388ac7b30ea47a38a99.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 57KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjcpboqh Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gkcuexyg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE