Static task
static1
Behavioral task
behavioral1
Sample
2e9dd7e19b95c464af7e1d043670cfcf42e6684ab35d29a689c715b4b4ce3e95.exe
Resource
win7-20240708-en
General
-
Target
2e9dd7e19b95c464af7e1d043670cfcf42e6684ab35d29a689c715b4b4ce3e95
-
Size
10.4MB
-
MD5
0541fcc2570a616f260ddd953268257b
-
SHA1
13c3d82907c82a05b391d55b1a7f6de59c2522a5
-
SHA256
2e9dd7e19b95c464af7e1d043670cfcf42e6684ab35d29a689c715b4b4ce3e95
-
SHA512
42756cd147e2bfc09b6a51c499ecb264e96fc448a8d0f58991e7aee668a8b71fb4eacf6886ea92a598a8dd9cdb1c36838a2540615949085079de211b848b7628
-
SSDEEP
196608:ufCsumTHg89dGq+cjvJFG4gyrzuPRIahalAocV9jdWi0HU8bJd:ufHTHgedGq+cds4VriP6ahali/Tad
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e9dd7e19b95c464af7e1d043670cfcf42e6684ab35d29a689c715b4b4ce3e95
Files
-
2e9dd7e19b95c464af7e1d043670cfcf42e6684ab35d29a689c715b4b4ce3e95.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hisvjfmo Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bcqvotec Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE