Static task
static1
Behavioral task
behavioral1
Sample
b81182e20f0c54c1b903045a3d0bf63f58942ea66e70c4a9516c8338ecdae03c.exe
Resource
win7-20240708-en
General
-
Target
b81182e20f0c54c1b903045a3d0bf63f58942ea66e70c4a9516c8338ecdae03c.exe
-
Size
2.0MB
-
MD5
86f793173f02f6c3e82962700f9d0393
-
SHA1
6f31095841204037ef18db8dc314037cd41eea6e
-
SHA256
b81182e20f0c54c1b903045a3d0bf63f58942ea66e70c4a9516c8338ecdae03c
-
SHA512
94cc0b09d70ddec5bf74eee5ba89a06a90610c7c949a76a08e3464a9082db180365b094e81de3705157584f138b803b0eb61102cd5cf435186d16eab5cce84b2
-
SSDEEP
49152:7yaQhWLVFDJik5s432FpEqi6kgplfhVtzemFD1xN12:uaioVlJiAs4Mpoc3pVjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b81182e20f0c54c1b903045a3d0bf63f58942ea66e70c4a9516c8338ecdae03c.exe
Files
-
b81182e20f0c54c1b903045a3d0bf63f58942ea66e70c4a9516c8338ecdae03c.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmyokrrt Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cvfsshmr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE