Static task
static1
Behavioral task
behavioral1
Sample
35adaf073819e4c3928988be1a2bc821b58b8502068427762f45b935550adfcc.exe
Resource
win7-20240903-en
General
-
Target
35adaf073819e4c3928988be1a2bc821b58b8502068427762f45b935550adfcc
-
Size
1.8MB
-
MD5
3b873c27a67e1ebca376efeb43b6dd77
-
SHA1
4d1770cc39d1788c26f4cf38226ea460426ea12f
-
SHA256
35adaf073819e4c3928988be1a2bc821b58b8502068427762f45b935550adfcc
-
SHA512
a2135126fb80b6ad0a30d5b7abc9260c6c7d255904bbb35cfa133e9b5f33ffb18a66c5631466186ad30d067490475b72a204bbc2f8929cd23ca1f0b1a55f960f
-
SSDEEP
49152:Tk4agaRVyvV3u7wmmbo8tL40KGqtKylJqzV9xe:4cVOQtL40KBKyjqhDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35adaf073819e4c3928988be1a2bc821b58b8502068427762f45b935550adfcc
Files
-
35adaf073819e4c3928988be1a2bc821b58b8502068427762f45b935550adfcc.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jekaggob Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ospjmuev Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE