Static task
static1
Behavioral task
behavioral1
Sample
092b9fa3db742e232986d0370cff59f730efd70f874b9c169a51af67adbf40dc.exe
Resource
win7-20240704-en
General
-
Target
092b9fa3db742e232986d0370cff59f730efd70f874b9c169a51af67adbf40dc
-
Size
1.8MB
-
MD5
acfca48415481a4376126dcd74d24ad3
-
SHA1
061521aeca58c6371fb4be4584d38e9f16de6300
-
SHA256
092b9fa3db742e232986d0370cff59f730efd70f874b9c169a51af67adbf40dc
-
SHA512
4adafd9adba91593fad6e5ab10fc5832c8d4295ff9aa8572eab99c19ea93f8bae291f0fdd3607bec2ca1b620f11a572919f6a32a1990e3b4efe4bc4082f17215
-
SSDEEP
24576:FMh6uzyEU4wyW9Ycegp6h78Hm0Ai+qAI0TqculGAFbkSgA0x4zwv7V3ub19:3uzyT4I9sgpiVbi+elfEAbzW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 092b9fa3db742e232986d0370cff59f730efd70f874b9c169a51af67adbf40dc
Files
-
092b9fa3db742e232986d0370cff59f730efd70f874b9c169a51af67adbf40dc.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ziyggmvb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fcrostwi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE