Static task
static1
Behavioral task
behavioral1
Sample
b326a178edc3942f5ae8b5603a3f49832a43b1aeca3d970003ea21382c4f2769.exe
Resource
win7-20240708-en
General
-
Target
b326a178edc3942f5ae8b5603a3f49832a43b1aeca3d970003ea21382c4f2769
-
Size
12.3MB
-
MD5
144a3a9e27a33a07db1a6f925ac78fe5
-
SHA1
622c3331a9b87bf13bb6a4df212832bf898ad159
-
SHA256
b326a178edc3942f5ae8b5603a3f49832a43b1aeca3d970003ea21382c4f2769
-
SHA512
00a6433454bca42db7bbaddf0faec3236f83e74f072d9cd21300af84053eb1b19e64e41a41490949d89081df523099078d7b95ba01dc6e3fb23ae0d4d1ce7285
-
SSDEEP
393216:ufHTHgedGq+cdHHZuZE1fO7b2J3oYphOpN3iO:uf8edGPInZvfO2h3nO7iO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b326a178edc3942f5ae8b5603a3f49832a43b1aeca3d970003ea21382c4f2769
Files
-
b326a178edc3942f5ae8b5603a3f49832a43b1aeca3d970003ea21382c4f2769.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hisvjfmo Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bcqvotec Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE