Static task
static1
Behavioral task
behavioral1
Sample
74f835de3341084831d50dda259c1afdedc2ab55a15b9261eb2fc35d544b3bd3.exe
Resource
win7-20240903-en
General
-
Target
74f835de3341084831d50dda259c1afdedc2ab55a15b9261eb2fc35d544b3bd3.exe
-
Size
1.8MB
-
MD5
1386bb5c7eff8706ab7a5e0216a5feff
-
SHA1
5ba39eacd963135a8311654fae4874b93c8b14dd
-
SHA256
74f835de3341084831d50dda259c1afdedc2ab55a15b9261eb2fc35d544b3bd3
-
SHA512
4d552567dac9062efd03faee5e4f9818c979560798d0db084fd809ce8dd9e0b2be1d4e66c63ed428eb51f77dfe46f35ca9f21bc2b04e1d51687ca78a7327dd7d
-
SSDEEP
49152:T0NWobjbNt7wUY+ja/Q8aDBHlapLdRCgQ1beNd1w648n:T0HPNt7wf+W/16BuDCh1Wd1sE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74f835de3341084831d50dda259c1afdedc2ab55a15b9261eb2fc35d544b3bd3.exe
Files
-
74f835de3341084831d50dda259c1afdedc2ab55a15b9261eb2fc35d544b3bd3.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bthzizpk Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zpjxawil Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE