Static task
static1
Behavioral task
behavioral1
Sample
bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82.exe
Resource
win7-20240903-en
General
-
Target
bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82.exe
-
Size
2.0MB
-
MD5
f05b36fc1015fd4c766dcbd8c90804c8
-
SHA1
a0cc2b720f1632f16d3a0e9131613fd81f24ecd6
-
SHA256
bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82
-
SHA512
ed82f6536d7ea734a8327daedc01077558aa6c6a1ed7dadbb39a651d76bbca8da21cb0aba26555553d007069ac522ad7967247610383266db8e9b4ad4ecee4a8
-
SSDEEP
49152:TAM0u9hScgIpIv7dMN5fB6ktasL249LToj7fQnfloPHShIY+nV8:EM0lXI0dcVkk8sL2494nQnf+HSCY+V8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82.exe
Files
-
bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qfaqmqmn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
liwqpwli Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE