Static task
static1
Behavioral task
behavioral1
Sample
dedfa939975f23b0cbe11f37a2baa89e81709cab18b7e43c1de55d5c7856dd88.exe
Resource
win7-20240708-en
General
-
Target
dedfa939975f23b0cbe11f37a2baa89e81709cab18b7e43c1de55d5c7856dd88.exe
-
Size
1.8MB
-
MD5
df7235db9d870ffb043afa57a9c1ba64
-
SHA1
ef08a2abc48ce961bec0e1962e03cb0c378b0850
-
SHA256
dedfa939975f23b0cbe11f37a2baa89e81709cab18b7e43c1de55d5c7856dd88
-
SHA512
ff17bb837b6a4403c48d60352a4769521496a614e90f622024db6706f6536c95264d175ee76fe6cb4ffe63096d8730d757932f90ae8bba14f1d6a8a518108bbb
-
SSDEEP
49152:CbXIxk85iHYgb8A4TEO8+ajTj3eqCT6SQb:CMTjg4dEKQTj3XCT6S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dedfa939975f23b0cbe11f37a2baa89e81709cab18b7e43c1de55d5c7856dd88.exe
Files
-
dedfa939975f23b0cbe11f37a2baa89e81709cab18b7e43c1de55d5c7856dd88.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 138KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kixhekms Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jfqrjhvh Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE