Static task
static1
Behavioral task
behavioral1
Sample
68eb987a62b6945287f28f021980b468df4622115fb643a14b43dd5f87b60b0f.exe
Resource
win7-20240903-en
General
-
Target
68eb987a62b6945287f28f021980b468df4622115fb643a14b43dd5f87b60b0f
-
Size
3.1MB
-
MD5
b733439c4301274dc53cd695ee993ea0
-
SHA1
14aad203f90d43e7778031f13c7211159fb2ea61
-
SHA256
68eb987a62b6945287f28f021980b468df4622115fb643a14b43dd5f87b60b0f
-
SHA512
47fb65bae81a6f63069fde903e3fd11624d7f7e68548ebc8991e7a77bb5d285424b623d8cf9d8a1988f196a7159738b709c507628860e8335633965e63ce75da
-
SSDEEP
49152:2eCJEsf1dvcE7LjiJE1sA7whzCYW9P8Vc81EY7x:2e0f1hcEHjiJE1s26CYIEL7x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68eb987a62b6945287f28f021980b468df4622115fb643a14b43dd5f87b60b0f
Files
-
68eb987a62b6945287f28f021980b468df4622115fb643a14b43dd5f87b60b0f.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oyvmetms Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xubelkxr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE