Static task
static1
Behavioral task
behavioral1
Sample
acbc3a103641f0f675d0908bab9fd890N.exe
Resource
win7-20240729-en
General
-
Target
acbc3a103641f0f675d0908bab9fd890N
-
Size
5.7MB
-
MD5
acbc3a103641f0f675d0908bab9fd890
-
SHA1
1ea04a0124c51a0a90ac579835cb6f8d9ce2ff0d
-
SHA256
73624d70d9a51011ff51df3798f88ae0890703ed523233fd2c00aee53e5527f9
-
SHA512
a5674d5d5031d9d9dd468922bc89ca5fd5a310d1ef67eb0c87abd0edb19634d052b104c953677c3d3faa2695c43dc1c6b4bca2a25cdab6bdac5dd29cd60d556e
-
SSDEEP
98304:roxLiHFatT/+jUfuFGI2OggYtAmx2cJYkL3NggR1vsf5J4duMHUgJztStw+5M:pAtD+jHGI2OggLmYcJxL3Ng21uiddHfj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acbc3a103641f0f675d0908bab9fd890N
Files
-
acbc3a103641f0f675d0908bab9fd890N.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.4MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pokweyzr Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tfhdnlsh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE