Static task
static1
Behavioral task
behavioral1
Sample
f191cc28ee681ea36c73780f422739493d6e8db494c07534a9ea2a688b02595a.exe
Resource
win7-20240903-en
General
-
Target
f191cc28ee681ea36c73780f422739493d6e8db494c07534a9ea2a688b02595a.exe
-
Size
2.9MB
-
MD5
33e21757c66d40d3dc94d24ded6840a1
-
SHA1
8500808931bea3a20659e43c9398cfb948db9e6c
-
SHA256
f191cc28ee681ea36c73780f422739493d6e8db494c07534a9ea2a688b02595a
-
SHA512
72c49e886cbeee046b5f6a035725ebf58f4dd924047d9fde876c1e2ff84d97d57ebcc061aff55be287d6fc6305a0694ebf1438cf1290b4a511fc5543fe30b168
-
SSDEEP
49152:UKks3TOJjbiQDqW9q/uoc+uRT9/BJgpi8MVNiq3e/:U83T+jbiQDH9LDN9Api8M7iq3e/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f191cc28ee681ea36c73780f422739493d6e8db494c07534a9ea2a688b02595a.exe
Files
-
f191cc28ee681ea36c73780f422739493d6e8db494c07534a9ea2a688b02595a.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 78KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mloafhuh Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zrwjoois Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ