Static task
static1
Behavioral task
behavioral1
Sample
ead0b088286beb0cb84ddb88c9df96d2642ecf531ee366af635e12ea3125bbe5N.exe
Resource
win7-20240729-en
General
-
Target
ead0b088286beb0cb84ddb88c9df96d2642ecf531ee366af635e12ea3125bbe5N
-
Size
2.0MB
-
MD5
cf94100c025af70df02b3cc0aba33380
-
SHA1
74670d73f39ae78ac857f3c0493870413e008de8
-
SHA256
ead0b088286beb0cb84ddb88c9df96d2642ecf531ee366af635e12ea3125bbe5
-
SHA512
87a51ff3e04b3e6e5e3e29a3ead62f0291f172c87b92d20afade0182484a1989be0870219f51705d309f73321f6e1807b6fac44d9dd9459f68c47e09014270b1
-
SSDEEP
49152:ARmuESE3dWmi0Pc0MS5TNl1KgKqPOkQIi8npKvThS+:VHWmxPjTkgKqWknnp4j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead0b088286beb0cb84ddb88c9df96d2642ecf531ee366af635e12ea3125bbe5N
Files
-
ead0b088286beb0cb84ddb88c9df96d2642ecf531ee366af635e12ea3125bbe5N.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dsepwduu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shhxnrqc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE