Static task
static1
Behavioral task
behavioral1
Sample
8021c509dc659f1f43bde016187f69aeccfa4e566822c65e455358cb68b3964f.exe
Resource
win7-20240903-en
General
-
Target
8021c509dc659f1f43bde016187f69aeccfa4e566822c65e455358cb68b3964f
-
Size
1.8MB
-
MD5
ea9a834ec0ed3e6284ed6c9e9c25fa01
-
SHA1
678f4a4833b8bfef950220876552e4cd99439f37
-
SHA256
8021c509dc659f1f43bde016187f69aeccfa4e566822c65e455358cb68b3964f
-
SHA512
3aaa60c85d1968000780d3768034a2bd399c16fe45aa7aa2f16899479c9aaa632d581db0c5990afdfc5024432b6ab398ce0d9f9c387d8f47c54017195bc1e134
-
SSDEEP
49152:qxS3vYxnBQyeSlmmJduPO08qabQ+bDLiVq:mS3gheSLK83fLMq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8021c509dc659f1f43bde016187f69aeccfa4e566822c65e455358cb68b3964f
Files
-
8021c509dc659f1f43bde016187f69aeccfa4e566822c65e455358cb68b3964f.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewmbiecr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hwdoirre Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE