Static task
static1
Behavioral task
behavioral1
Sample
9a26f6f3bd725610c0140f56a28d390446bd6d4a62a0dab7d6218b8c36b0b9c4.exe
Resource
win7-20240708-en
General
-
Target
9a26f6f3bd725610c0140f56a28d390446bd6d4a62a0dab7d6218b8c36b0b9c4.exe
-
Size
1.8MB
-
MD5
623bbd8cde0931c9c5cc57acf112c554
-
SHA1
be9f28afdff1c0eb5235baaefdc8020a847fb372
-
SHA256
9a26f6f3bd725610c0140f56a28d390446bd6d4a62a0dab7d6218b8c36b0b9c4
-
SHA512
776734854baf0cbc2994bb046bb0683e61239cca3fb46e742860cc3bb0318c9e7f1be00147f71814f6ca48b65891418d5c08b4736518743b501c6ed0e5620929
-
SSDEEP
49152:iVNVdv720dYUYPVz4neNwGrw2yMZ+SK5bwb:iTbqrJPV8nhGc2z36bw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a26f6f3bd725610c0140f56a28d390446bd6d4a62a0dab7d6218b8c36b0b9c4.exe
Files
-
9a26f6f3bd725610c0140f56a28d390446bd6d4a62a0dab7d6218b8c36b0b9c4.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
byskbwqr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jpuskzzx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE