Static task
static1
Behavioral task
behavioral1
Sample
f685dc350a4cb258b7264d40139b5a780d3808cceda6494f943e0b004b08e450.exe
Resource
win7-20240903-en
General
-
Target
f685dc350a4cb258b7264d40139b5a780d3808cceda6494f943e0b004b08e450.exe
-
Size
1.7MB
-
MD5
f21d86d30995ee5d6afd7d47a0ff37b1
-
SHA1
46627b0b5f64bb84ec4cee3ad368796a598adf96
-
SHA256
f685dc350a4cb258b7264d40139b5a780d3808cceda6494f943e0b004b08e450
-
SHA512
c697015b1c1f1f1c19676134cab8416572edafe2a2c43d4801a194dd75832c276de343d40202a3fe95f4df96340086dcbff0d34afbf63f3ed8fcad7853d4cc66
-
SSDEEP
49152:8v6L4+LhGTyzJbSdz+wlQEUGwqZlsKq7JF1dzz6Qxar:8iEezJbS9+wlQtGsb1dzz6sa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f685dc350a4cb258b7264d40139b5a780d3808cceda6494f943e0b004b08e450.exe
Files
-
f685dc350a4cb258b7264d40139b5a780d3808cceda6494f943e0b004b08e450.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvtxdyrd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdacvdsp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE