Static task
static1
Behavioral task
behavioral1
Sample
c978352670126322d013cb1afb3b8ce7bfcc1f0a39765f5dead460dc7f608717.exe
Resource
win7-20240903-en
General
-
Target
c978352670126322d013cb1afb3b8ce7bfcc1f0a39765f5dead460dc7f608717.exe
-
Size
1.8MB
-
MD5
f74ed5926c551ea89e49d964e729e736
-
SHA1
115d45e11d815a3773f95b401ac64711c3a3e99c
-
SHA256
c978352670126322d013cb1afb3b8ce7bfcc1f0a39765f5dead460dc7f608717
-
SHA512
b917148554b232eec9fce319791e87b4fd7630ea9b16db4b899bafb7406ac516c1418dda0f5286be1c9cd86acd516a405dda8c85b9cccab59e1a17dac46750df
-
SSDEEP
49152:zzgWOqtxDQL+/nn70NnCtVb1trDTeuxsnb:4WOq7U6nIGbzrDU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c978352670126322d013cb1afb3b8ce7bfcc1f0a39765f5dead460dc7f608717.exe
Files
-
c978352670126322d013cb1afb3b8ce7bfcc1f0a39765f5dead460dc7f608717.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxhfjhyx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wyglidst Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE