Static task
static1
Behavioral task
behavioral1
Sample
fda82b378fd6163962c6f2716dafa552f17bbe91de8bc5b4b26197ee51a03fceN.exe
Resource
win7-20240729-en
General
-
Target
fda82b378fd6163962c6f2716dafa552f17bbe91de8bc5b4b26197ee51a03fceN.exe
-
Size
2.8MB
-
MD5
a5c8bd36e8b539c6ff0236ddc2474e10
-
SHA1
7cbd1831abb583baa80ea36cba456df833ab5b10
-
SHA256
fda82b378fd6163962c6f2716dafa552f17bbe91de8bc5b4b26197ee51a03fce
-
SHA512
332df802676bd63d0e45f0145564f833fb04f08ffcc857215f54a6dde4b92e0e99b086a85fa18882abe53848e07efd104ef313b49992c44eedb79d324a4b6eb7
-
SSDEEP
49152:Nv6XmEUiBDwT3DIP9WfboVx22uxx7iPWeR:NemEUiBkTTIP9ioLuxx7iPWU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fda82b378fd6163962c6f2716dafa552f17bbe91de8bc5b4b26197ee51a03fceN.exe
Files
-
fda82b378fd6163962c6f2716dafa552f17bbe91de8bc5b4b26197ee51a03fceN.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 78KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uzdakibb Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kwfnbqtg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ