Static task
static1
Behavioral task
behavioral1
Sample
bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82.exe
Resource
win7-20241010-en
General
-
Target
bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82.exe
-
Size
2.0MB
-
MD5
f36507acd1fd9b4e41b31d5ec7d7d346
-
SHA1
e0c7c149ad14f6ef5c2dea1c07108d84136c2d7b
-
SHA256
f19953c40d9bb9a4323b6bec23ce9839a6199e1fcbcaa2b453f784ae53c93481
-
SHA512
0864167e3ef89bcb861c9a3803ebb3c075fa9b9153950c764ce1ad5370929b6b5c03fff7e82fd73602682afd71c020711e8892b3f3578800c7f7de65ff84ca35
-
SSDEEP
49152:TAM0u9hScgIpIv7dMN5fB6ktasL249LToj7fQnfloPHShIY+nV8N:EM0lXI0dcVkk8sL2494nQnf+HSCY+V8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82.exe
Files
-
bc66777663130197283284413e13e0972ed870993c3d4e23483eacefe3b21f82.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qfaqmqmn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
liwqpwli Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE