Static task
static1
Behavioral task
behavioral1
Sample
7e6e760e70b34d6931a8ea747f22b5de514c3c301528b29f1896e4e103f63d65.exe
Resource
win7-20240903-en
General
-
Target
7e6e760e70b34d6931a8ea747f22b5de514c3c301528b29f1896e4e103f63d65.exe
-
Size
2.0MB
-
MD5
6782b6a9690c03ceba489cf7d5abcba4
-
SHA1
6175dc2cb6e459895baa32203298a86ac8a8844f
-
SHA256
7e6e760e70b34d6931a8ea747f22b5de514c3c301528b29f1896e4e103f63d65
-
SHA512
c08b32f65fe38c48ff97ddc5e96f783b57994537ac4847b90234c4a5fd623de22a38e1f80e042b8a09c3e1b89b0ec5d318de39b768543ea7e6dec58ede9af0eb
-
SSDEEP
49152:ARmuESE3dWmi0Pc0MS5TNl1KgKqPOkQIi8npKvThS+o:VHWmxPjTkgKqWknnp4jo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7e6e760e70b34d6931a8ea747f22b5de514c3c301528b29f1896e4e103f63d65.exe
Files
-
7e6e760e70b34d6931a8ea747f22b5de514c3c301528b29f1896e4e103f63d65.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dsepwduu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shhxnrqc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE