Static task
static1
Behavioral task
behavioral1
Sample
effe809e569c9cc58ae383e2022c7624b318d9c74aa9e732b9649e6da497b120.exe
Resource
win7-20240903-en
General
-
Target
effe809e569c9cc58ae383e2022c7624b318d9c74aa9e732b9649e6da497b120.exe
-
Size
1.8MB
-
MD5
6a5ae0fdd17446ea184e3eb63fc39e8e
-
SHA1
4dd80cfcd6823fbcb4c9aa5b4a1de6337c2c22b5
-
SHA256
effe809e569c9cc58ae383e2022c7624b318d9c74aa9e732b9649e6da497b120
-
SHA512
afbd13fb863c1a9106ef4fe2ce11751d4625053722ff0336e12178ea216ac24abb6470d40e0584d26de6da388f5c53a9e2e87c142fa017b27f00a572ae8de6b3
-
SSDEEP
49152:1V9V9gN1QAey4PazBbcCdIQh4uIBDnwHUro72:vriN1BCPyGw4ueD62
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource effe809e569c9cc58ae383e2022c7624b318d9c74aa9e732b9649e6da497b120.exe
Files
-
effe809e569c9cc58ae383e2022c7624b318d9c74aa9e732b9649e6da497b120.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ppybixiw Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkekdctt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE