Static task
static1
Behavioral task
behavioral1
Sample
87f305d57a9e0514df2e512e5e8971efe3d265fa7e490738d7ece5ed84eec032.exe
Resource
win7-20240903-en
General
-
Target
87f305d57a9e0514df2e512e5e8971efe3d265fa7e490738d7ece5ed84eec032
-
Size
1.8MB
-
MD5
e22f93be781d6f4c8155c271e2b10d6e
-
SHA1
e5b325936e1e9e12acdef894f554e5f510fc1514
-
SHA256
87f305d57a9e0514df2e512e5e8971efe3d265fa7e490738d7ece5ed84eec032
-
SHA512
7205d871d3c456679bb939b42d8231c725f61ce01b79d2f1aeb900cdab819d3ca6771cb149269e091b9f70d2e33b6390cac33fbd868ea806d56d300495a15c45
-
SSDEEP
49152:1PpcqI3ZohvnPe9FzgeBvT5POre/zlmfZLmxT+0RHK4p:1pfa2hvWTtcBfZLmp+0xv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87f305d57a9e0514df2e512e5e8971efe3d265fa7e490738d7ece5ed84eec032
Files
-
87f305d57a9e0514df2e512e5e8971efe3d265fa7e490738d7ece5ed84eec032.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ndllhvds Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
abxaekdw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE