Static task
static1
Behavioral task
behavioral1
Sample
c83d645581ef38f2d06988e08a1ce7f80e7a5aba7646aeb36fef9fe09fdb573c.exe
Resource
win7-20240708-en
General
-
Target
c83d645581ef38f2d06988e08a1ce7f80e7a5aba7646aeb36fef9fe09fdb573c.exe
-
Size
1.8MB
-
MD5
8b192bcee391c63fa7758b4b808615de
-
SHA1
79920751e35e185b9501e26b5705110d925bfc80
-
SHA256
c83d645581ef38f2d06988e08a1ce7f80e7a5aba7646aeb36fef9fe09fdb573c
-
SHA512
398e885d4b37aec4c00d9962f5a4e22218ee4e20c6997a05a5b97d94286c7458d03c0c9e1439fff1c31730639d0c8cf268350002b8036f448df9fb1661c24faf
-
SSDEEP
49152:bbkgN/EAwiBIeKKC2OccuoJkfWEzlFH1I:7/EA3KKrhoJCE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c83d645581ef38f2d06988e08a1ce7f80e7a5aba7646aeb36fef9fe09fdb573c.exe
Files
-
c83d645581ef38f2d06988e08a1ce7f80e7a5aba7646aeb36fef9fe09fdb573c.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wyplieqs Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sulapwep Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE