Static task
static1
Behavioral task
behavioral1
Sample
1886e3d4d87ae3ebfe93236ee9edf932048ce8f9d9ded570f732bcb189a1a783.exe
Resource
win7-20240729-en
General
-
Target
1886e3d4d87ae3ebfe93236ee9edf932048ce8f9d9ded570f732bcb189a1a783
-
Size
1.7MB
-
MD5
eadad2c7cd9211ccb1cf0a382bd8ecd5
-
SHA1
7ba9d1c0f8aa9aca47808ffd0ba2871ba3163d96
-
SHA256
1886e3d4d87ae3ebfe93236ee9edf932048ce8f9d9ded570f732bcb189a1a783
-
SHA512
8b4954bb79f2b4456fedaa32ef051178a32da20df7832706663655fe93e32e0364efc7d2c8037d8264a610643656637c65dbb65bb5a77cc65e1d273f5d05c3d0
-
SSDEEP
49152:zxIEAj0xntpyFHPzIEJVYw00mIYIm1jg1JDlgcW:FrlU+Qn2jgLxW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1886e3d4d87ae3ebfe93236ee9edf932048ce8f9d9ded570f732bcb189a1a783
Files
-
1886e3d4d87ae3ebfe93236ee9edf932048ce8f9d9ded570f732bcb189a1a783.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cibkuwqq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
erpxfoju Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE