Static task
static1
Behavioral task
behavioral1
Sample
d44cf4c345ad3c2a14ba1524bb8dcda23a42aa5a9d33409020b217dc9d1ded73.exe
Resource
win7-20240708-en
General
-
Target
d44cf4c345ad3c2a14ba1524bb8dcda23a42aa5a9d33409020b217dc9d1ded73.exe
-
Size
2.0MB
-
MD5
9e23c7a5c0ffc3296edb378b78a64128
-
SHA1
382ae4b7ae5031a160067a9736e7eaec59046381
-
SHA256
d44cf4c345ad3c2a14ba1524bb8dcda23a42aa5a9d33409020b217dc9d1ded73
-
SHA512
3fae13163f7f0ad90e3a088e78490ce0052141b6187501d8ae65d2ff6da66bfbbd8ff568a23a1caffff9a0f8e5bf9bf1587424708c0cfd66170e9a0aa4ddf715
-
SSDEEP
49152:PPO1Nef3MjVWwwxveOevR0kHvYA9qqCTh/l/XXf:PPOTef8BWww4vNwwqqEhZf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d44cf4c345ad3c2a14ba1524bb8dcda23a42aa5a9d33409020b217dc9d1ded73.exe
Files
-
d44cf4c345ad3c2a14ba1524bb8dcda23a42aa5a9d33409020b217dc9d1ded73.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ksimjqnq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jqummayk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE