Static task
static1
Behavioral task
behavioral1
Sample
79cbb9d076808f0a656978ca6b6b3548d1b9436bb959816478f470578a3f32aa.exe
Resource
win7-20240903-en
General
-
Target
79cbb9d076808f0a656978ca6b6b3548d1b9436bb959816478f470578a3f32aa
-
Size
1.9MB
-
MD5
e70283a77fed98387a119ef5328ad73d
-
SHA1
22d6a478fa6aab2f935301e3032028fa2224ab75
-
SHA256
79cbb9d076808f0a656978ca6b6b3548d1b9436bb959816478f470578a3f32aa
-
SHA512
53fa98aa14e3eb355373c594d48b8b2281a348b1f7dbb260d1a9b0fea4b34cc3b616156e1431b413bd93e8a81a04cf8f387abfd7e39ab66fea56300e28f374f3
-
SSDEEP
24576:N0OdezrjHqy2hvw8MGPlHnpj2riCUYxawsAK5EIqVmhL4hTvoykEea8SQmXrHg/m:N0Junzhnpj6gFzqVv1w/3nI7Hg/Wa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79cbb9d076808f0a656978ca6b6b3548d1b9436bb959816478f470578a3f32aa
Files
-
79cbb9d076808f0a656978ca6b6b3548d1b9436bb959816478f470578a3f32aa.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lkezgndh Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
phcustvv Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE