Static task
static1
Behavioral task
behavioral1
Sample
02518c4c83e48ed7cafe97c97a47141c8d1f10cad6eccb9a9567435b89b9dbce.exe
Resource
win7-20240708-en
General
-
Target
02518c4c83e48ed7cafe97c97a47141c8d1f10cad6eccb9a9567435b89b9dbce.exe
-
Size
1.8MB
-
MD5
4cb070d1dd5db1744598e1e6a2fef2b0
-
SHA1
3082730a7ca1af654f83026fd7818870ce248bbf
-
SHA256
02518c4c83e48ed7cafe97c97a47141c8d1f10cad6eccb9a9567435b89b9dbce
-
SHA512
07637cf152b1771f3e8ef10f887543be08d4756c1f1d863005c77414b6e06d5a4b71d8f2ba76aaeca348fb64502c03efdd8065a4e690d210eeb825f76b976020
-
SSDEEP
49152:gtTM9cOK+UHMhWG9bB3vqGBel1lcYAm/94fRtgjvH:gN+cOQHMhvbSGsfc0/WO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02518c4c83e48ed7cafe97c97a47141c8d1f10cad6eccb9a9567435b89b9dbce.exe
Files
-
02518c4c83e48ed7cafe97c97a47141c8d1f10cad6eccb9a9567435b89b9dbce.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wkodvquj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nzthpqbb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE