Static task
static1
Behavioral task
behavioral1
Sample
ced12cc0251c49540e67b299b737dc112e29ee97f5f3d93edf8fd3cd046328b3.exe
Resource
win7-20240903-en
General
-
Target
ced12cc0251c49540e67b299b737dc112e29ee97f5f3d93edf8fd3cd046328b3
-
Size
1.8MB
-
MD5
eeef76a63a88870ee08ebbbd90fbcb8f
-
SHA1
f004204f188147498ffb6caf514ab03de1f7dc53
-
SHA256
ced12cc0251c49540e67b299b737dc112e29ee97f5f3d93edf8fd3cd046328b3
-
SHA512
6e5282765414205c43a3548ad7ef9fd1cd4550cf46ccd34dbb909f2870311428835d275482a771dffd197bb02da821b5e039b0b5a5a55876b9447945bad9b1d9
-
SSDEEP
49152:YqdBhdxABFI3NaLJ48787I+zNd5T46CBOQxNnU:NBRzoy8QTZ46SL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ced12cc0251c49540e67b299b737dc112e29ee97f5f3d93edf8fd3cd046328b3
Files
-
ced12cc0251c49540e67b299b737dc112e29ee97f5f3d93edf8fd3cd046328b3.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wbhzobgr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qmckovux Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE