Static task
static1
Behavioral task
behavioral1
Sample
7814639cbfb63d029afd5f98fe252e8660fc658fe04b4b527b4ce551e24cc993.exe
Resource
win7-20240903-en
General
-
Target
7814639cbfb63d029afd5f98fe252e8660fc658fe04b4b527b4ce551e24cc993
-
Size
1.8MB
-
MD5
30193d5f61042fda05361ceca3b379a2
-
SHA1
b99ada4454e019d15ef6e89c9d9a82081eee3fc0
-
SHA256
7814639cbfb63d029afd5f98fe252e8660fc658fe04b4b527b4ce551e24cc993
-
SHA512
18e929925762fa909c3cc5c37ac1b41c072908004ee58afdddb4a263322b5c9487de2e8be81242ba6b239e8ed9b17685ed986f1f860535f83e589560a7a6a89d
-
SSDEEP
49152:8GimVkgyzY3pDBrF9gnN21IQ1qO85uxsWel7z9+g5:8N9gyzMF9gN2GO85DWel7Ag5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7814639cbfb63d029afd5f98fe252e8660fc658fe04b4b527b4ce551e24cc993
Files
-
7814639cbfb63d029afd5f98fe252e8660fc658fe04b4b527b4ce551e24cc993.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upeiwtbu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tntfaruk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE