Static task
static1
Behavioral task
behavioral1
Sample
0e3f678d97ef7abdbfe54cef54509ebbb6861450f01f702e960733e1844d0936.exe
Resource
win7-20240903-en
General
-
Target
0e3f678d97ef7abdbfe54cef54509ebbb6861450f01f702e960733e1844d0936.exe
-
Size
1.8MB
-
MD5
59918d5c853bf16b5c3223e7a00a9042
-
SHA1
ae3f79d93024336001923d303fbe30a563002670
-
SHA256
0e3f678d97ef7abdbfe54cef54509ebbb6861450f01f702e960733e1844d0936
-
SHA512
a87f7776f88ba3d959a79b7b2e874f692eb5afee3d8547e961a21457b7c16b3f475bc8e1a03df56701893ed489315acb3b0518a2e63eae958af79879eacf356b
-
SSDEEP
49152:AP6iAkKeJaFSboMh/AYAIA+D4Y99PSJ2mJyr5SmVprDOb+f:AP6iAh6e+oMh/7AIA+D4q6L0BOb+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e3f678d97ef7abdbfe54cef54509ebbb6861450f01f702e960733e1844d0936.exe
Files
-
0e3f678d97ef7abdbfe54cef54509ebbb6861450f01f702e960733e1844d0936.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jitfdjew Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wnsejmec Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE