Static task
static1
Behavioral task
behavioral1
Sample
7cf831e262ee58828e8ddb45f2d56f5d20aae4d20c2a3cbd4b13e4fc0fc8c88a.exe
Resource
win7-20241010-en
General
-
Target
7cf831e262ee58828e8ddb45f2d56f5d20aae4d20c2a3cbd4b13e4fc0fc8c88a
-
Size
2.0MB
-
MD5
e16e8a63dd2f418818c89f7afa98a828
-
SHA1
2a2871bc83e603e994429ab08f2444fdc67245f9
-
SHA256
7cf831e262ee58828e8ddb45f2d56f5d20aae4d20c2a3cbd4b13e4fc0fc8c88a
-
SHA512
e9fd477359cfceb6f9e9f136af44ad94817fb2207fc3b881224a9721333364e68eda6e963c76bd7fc69e0eceaf3c6358f270efd889d629fae9f436a029d6337e
-
SSDEEP
49152:pLMltH8SypoL4zgvAei9bCXoLQ/i6wot:xEHOoEz8Y9bCXoLZPU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cf831e262ee58828e8ddb45f2d56f5d20aae4d20c2a3cbd4b13e4fc0fc8c88a
Files
-
7cf831e262ee58828e8ddb45f2d56f5d20aae4d20c2a3cbd4b13e4fc0fc8c88a.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jjwxcjbx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eynhqhqp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE