Static task
static1
Behavioral task
behavioral1
Sample
f930a52a2107da490787657629a889c86714dd2fa9dbd7a18ac31866811ec6e9.exe
Resource
win7-20240903-en
General
-
Target
f930a52a2107da490787657629a889c86714dd2fa9dbd7a18ac31866811ec6e9.exe
-
Size
1.8MB
-
MD5
e1f54d2c6f204549c2b9b802fe2102e1
-
SHA1
cdb2dd37db40e9a646923b21d6a6130bcf6a9019
-
SHA256
f930a52a2107da490787657629a889c86714dd2fa9dbd7a18ac31866811ec6e9
-
SHA512
357300a8fee21656563086dc7f17bac0db5cd080787b6735a4deb865192bb66a085b9ced01c7cf56ad3ed03e36cdd4c99eba92ff1ffb016952dae035c0c83590
-
SSDEEP
49152:U9iLI2wAEECzTxEiafjxR1LbBRtvgFK1zZ:RLdwAuxH0xR+a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f930a52a2107da490787657629a889c86714dd2fa9dbd7a18ac31866811ec6e9.exe
Files
-
f930a52a2107da490787657629a889c86714dd2fa9dbd7a18ac31866811ec6e9.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vjquvwqo Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sjkzxxvz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE