Static task
static1
Behavioral task
behavioral1
Sample
c1bff63e4e1aa1fccb42244c12ef8db8ebc4e0e3a1339f58e3801ee9f8e7ef48.exe
Resource
win7-20240903-en
General
-
Target
c1bff63e4e1aa1fccb42244c12ef8db8ebc4e0e3a1339f58e3801ee9f8e7ef48
-
Size
2.1MB
-
MD5
686c6902c3cea93c353dfb5532d73013
-
SHA1
760cd9a27a11acef4b009381206e5788b539d680
-
SHA256
c1bff63e4e1aa1fccb42244c12ef8db8ebc4e0e3a1339f58e3801ee9f8e7ef48
-
SHA512
d7aa28fa9fd142d76e95d386a8c68aff2c258e2063c442308bd53ea38c6956ee988b55e5453f8f08c6be4901ee6943e90bb745ce1ac8a1c5bab2a2462d56f119
-
SSDEEP
49152:paS9i86GfORLZTkRaVZ+m1CW4exRVO1moW:10PG2z+m1P4exDOY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1bff63e4e1aa1fccb42244c12ef8db8ebc4e0e3a1339f58e3801ee9f8e7ef48
Files
-
c1bff63e4e1aa1fccb42244c12ef8db8ebc4e0e3a1339f58e3801ee9f8e7ef48.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qpjqttkr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iyqiyblc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE