Static task
static1
Behavioral task
behavioral1
Sample
dabdedec7a97d39dacd1cafc50d9682a5b16f4b3c1ec19ad0457cdd8c34ba422.exe
Resource
win7-20240903-en
General
-
Target
dabdedec7a97d39dacd1cafc50d9682a5b16f4b3c1ec19ad0457cdd8c34ba422
-
Size
1.8MB
-
MD5
9ce512a9fcc574ea43d69c6d4391719e
-
SHA1
b0abf8c9807b8c8f7d4351b5cd86761896b377d7
-
SHA256
dabdedec7a97d39dacd1cafc50d9682a5b16f4b3c1ec19ad0457cdd8c34ba422
-
SHA512
d0b8daac6fac43f0413cdf908252ce79681541486c745f8df1d73c05eb9a42c6e8320949511a239664b6e152ea3f6e9bbb609ee5d6c067c8ccf349c7c466db3a
-
SSDEEP
49152:P96wxdTZw9nDLkw9BGiK+Rxj6lthF2/Nuj1fXKs9Kf:0w7ZYcw9BGiP6tFINUXK0K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource dabdedec7a97d39dacd1cafc50d9682a5b16f4b3c1ec19ad0457cdd8c34ba422
Files
-
dabdedec7a97d39dacd1cafc50d9682a5b16f4b3c1ec19ad0457cdd8c34ba422.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbdvrcfy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
caikyzla Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE