Static task
static1
Behavioral task
behavioral1
Sample
30c0a81d805980ae86697be0154a14d7ebcdc92cbeadc668a80abbee7da8f729.exe
Resource
win7-20240903-en
General
-
Target
30c0a81d805980ae86697be0154a14d7ebcdc92cbeadc668a80abbee7da8f729
-
Size
1.8MB
-
MD5
46eff7b9eb69f406eb3e846c268f7330
-
SHA1
c45ab7789c08a77ecdfb4b2ca6fbacd879e3e8ce
-
SHA256
30c0a81d805980ae86697be0154a14d7ebcdc92cbeadc668a80abbee7da8f729
-
SHA512
41b6b93cee0a908e5bdd4a649085f6368e573c54a842f1784b5659743ef072c909b48d16d619a5f861da8953980eecc14966d4d655461d5821958f7158da4c95
-
SSDEEP
24576:8OBZvJQODFJnlaC+nU06bRFC4aqNLxA/EdK6Mf7ZIAZ55YKBqeFqKEEr4IaYBGgB:PLbnf++vC4LNLxAMK7jMKoq4y4tB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30c0a81d805980ae86697be0154a14d7ebcdc92cbeadc668a80abbee7da8f729
Files
-
30c0a81d805980ae86697be0154a14d7ebcdc92cbeadc668a80abbee7da8f729.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gsslkvbo Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
frxpigjm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE