Static task
static1
Behavioral task
behavioral1
Sample
4c06a5c65195195c959092af9854e261.exe
Resource
win7-20241010-en
General
-
Target
4c06a5c65195195c959092af9854e261.exe
-
Size
2.0MB
-
MD5
4c06a5c65195195c959092af9854e261
-
SHA1
e03cf4406b4eb1c3f8dffd27f575ee7c982cee61
-
SHA256
5a85aa8e4887abbb1555ccd0df46daeb766d3f9e56eddbe8fbc219bb57b82238
-
SHA512
baeb99d6c5d2eb92103302ce8e8d784f910570b65faa7f7804f1e24cc1fdd42bacec56d922bcdf706b399bb0f5103bc981b4c0f629cb55abe2ead4f8b0f1f60a
-
SSDEEP
49152:CKp2w2Ck2boh1Ma5uv8uoy5QLTiXuhh6Pybyx+u:nOH6QuUby5uiXuP6PyW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c06a5c65195195c959092af9854e261.exe
Files
-
4c06a5c65195195c959092af9854e261.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jzypffam Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ledcupjc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE