Static task
static1
Behavioral task
behavioral1
Sample
7ec234d569603660080ea0d4a7e4e54e237e519089dddca4c678038cbadcc778.exe
Resource
win10v2004-20240802-en
General
-
Target
7ec234d569603660080ea0d4a7e4e54e237e519089dddca4c678038cbadcc778
-
Size
1.8MB
-
MD5
17501ef864154a07ad62b3b54e0fc9ce
-
SHA1
478c0b532235f76c9036627fdc9286a1e570af92
-
SHA256
7ec234d569603660080ea0d4a7e4e54e237e519089dddca4c678038cbadcc778
-
SHA512
ed7bdd54e7046de070f348503989518b3517abc391423bd8d161ac305fec2eedd03977e212a5ffe13648fb615ace191b7edba3c3f386ad6552ff050f6c182cd8
-
SSDEEP
24576:1VilaMfuzphJnD5g5ymevG2GF8AkoWho2lY5P4+WjePCy8/URLujliYfnUKsqbKw:bSaMapTnbmmekFKAZn1sR6EwUKPKM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7ec234d569603660080ea0d4a7e4e54e237e519089dddca4c678038cbadcc778
Files
-
7ec234d569603660080ea0d4a7e4e54e237e519089dddca4c678038cbadcc778.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cxhzskrk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
womeesps Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE