Static task
static1
Behavioral task
behavioral1
Sample
72bdba42bc3c1e989c816a5e8e5469ffe1f405fc5b4f5a4378e643c0eded671cN.exe
Resource
win7-20240704-en
General
-
Target
72bdba42bc3c1e989c816a5e8e5469ffe1f405fc5b4f5a4378e643c0eded671cN
-
Size
1.8MB
-
MD5
943a436679c95411bc5da871d8008d10
-
SHA1
d4e2afafbff0c18e550a288445f01691ffaf392b
-
SHA256
72bdba42bc3c1e989c816a5e8e5469ffe1f405fc5b4f5a4378e643c0eded671c
-
SHA512
e55a56523f39b0997aff6fef89e7e31b88429e97e740ab850bfd635477c9b959f4f40af894e68bea4f045d450ac13ca5748969b900f1779b04b35d991b9da8d4
-
SSDEEP
49152:N6lFBtYQgvRAxODmBMBLDRbchcPoMZ3IDG/Ah6RXG+2:N6lTiQgvR4BMJdQhcPdIG/PRW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72bdba42bc3c1e989c816a5e8e5469ffe1f405fc5b4f5a4378e643c0eded671cN
Files
-
72bdba42bc3c1e989c816a5e8e5469ffe1f405fc5b4f5a4378e643c0eded671cN.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxelsdiv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
abteqpjr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE