Static task
static1
Behavioral task
behavioral1
Sample
c344d1b549c161b614adf37e6c83deeb701aca0d6bd02c1e8e0bd703c8f80164.exe
Resource
win7-20240708-en
General
-
Target
c344d1b549c161b614adf37e6c83deeb701aca0d6bd02c1e8e0bd703c8f80164
-
Size
1.8MB
-
MD5
0312dc640208cca9bc63fea72054405e
-
SHA1
dea2886c290d3a977e699d4a5ed4b704c0f93e85
-
SHA256
c344d1b549c161b614adf37e6c83deeb701aca0d6bd02c1e8e0bd703c8f80164
-
SHA512
98b65e2da0634d176e7146972472d3f5e2f6ba657f5f7c2d5755f2ed01865ade7d655d8557afe4addcfe1349d502936c365b176d835ccf3a0924b4b95cfdf3db
-
SSDEEP
49152:tcUHMaOGw5eGTYJlXdcrLhBy9jAqqrxlfzsvS:DpGTY3Xdc3hBOb0Dsv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c344d1b549c161b614adf37e6c83deeb701aca0d6bd02c1e8e0bd703c8f80164
Files
-
c344d1b549c161b614adf37e6c83deeb701aca0d6bd02c1e8e0bd703c8f80164.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nhmgwapg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avnxhzci Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE