Static task
static1
Behavioral task
behavioral1
Sample
cd363b366407671feb367e5878da0c3ef31818c052c339dd53785fa47725b4afN.exe
Resource
win7-20240729-en
General
-
Target
cd363b366407671feb367e5878da0c3ef31818c052c339dd53785fa47725b4afN
-
Size
1.8MB
-
MD5
e13b01880fa1e7e7475560bd568f9530
-
SHA1
e1597a428380588931db9c60c2af66a92e2ea155
-
SHA256
cd363b366407671feb367e5878da0c3ef31818c052c339dd53785fa47725b4af
-
SHA512
d3ed251c125b44c8c3d3c10ad6fd5b9a0fa0d2869139fe817db80428a4ffa3335f7613fbf6a2231071e019afb48fc1ed55d0b4159c91e7ce1c2d44b33515bf3b
-
SSDEEP
49152:pGWEtsD/XCCz2p/WrqAKppDfOEL5E/RBefdm3klB4:pAsCCz0WMZE/PeckT4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cd363b366407671feb367e5878da0c3ef31818c052c339dd53785fa47725b4afN
Files
-
cd363b366407671feb367e5878da0c3ef31818c052c339dd53785fa47725b4afN.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvokpnxb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qncgmwxk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE