Static task
static1
Behavioral task
behavioral1
Sample
1c783b40a92c0fcb8fe16dc579dc35dd72aa7b29a5e4069cd97b5865ee275316.exe
Resource
win7-20240708-en
General
-
Target
1c783b40a92c0fcb8fe16dc579dc35dd72aa7b29a5e4069cd97b5865ee275316
-
Size
3.1MB
-
MD5
0e2e2d711d1e92522aa8e441d4a81d03
-
SHA1
b14e1506a347c97b7ba8fd07809bbe87219549a6
-
SHA256
1c783b40a92c0fcb8fe16dc579dc35dd72aa7b29a5e4069cd97b5865ee275316
-
SHA512
e160ee4bbcffa69525f1d72477926c8c7fd95aedd314cf4ad16c02f58e3290bb2f00b2dddadb16cca85892f27b815fa33329b264b67433c101039d3a3bf07fb6
-
SSDEEP
24576:pOJ1lHVWRNAjkCqH6o9AXXlZTli5yVDQdRjc4dgLOUCsl47x/Pk7LnspcrMFqzl8:pOJv4axVDIP82pcrMFiQj/aO9Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c783b40a92c0fcb8fe16dc579dc35dd72aa7b29a5e4069cd97b5865ee275316
Files
-
1c783b40a92c0fcb8fe16dc579dc35dd72aa7b29a5e4069cd97b5865ee275316.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uoaaqenw Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhltojnu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE