Static task
static1
Behavioral task
behavioral1
Sample
258cfb05d707f90183dd6ba8569763e75aff570da88caaf15e7234218d13e324.exe
Resource
win7-20241010-en
General
-
Target
258cfb05d707f90183dd6ba8569763e75aff570da88caaf15e7234218d13e324
-
Size
1.8MB
-
MD5
2f60d3c5f1049e713c629e4b109019e0
-
SHA1
52c4769003ef9cfee07c48cf4f8ff3560dbf8733
-
SHA256
258cfb05d707f90183dd6ba8569763e75aff570da88caaf15e7234218d13e324
-
SHA512
b185d43a70429dd27abad4e35c4e091d43a217f74201a6bf839af5f9da26bcf64b4cb9eb0045aba8eeb3f661f58a17212e457b9c9cc36ccab5501cc6c4694141
-
SSDEEP
24576:n66beDDqtDfBu4zbZ1CHYgUVVPAJlaU1cnwLjkTqt/AMfjJDdZJivttAnBAYYaUJ:SD+tDZuObZV3GlDcnwLjrZbwtE++XS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 258cfb05d707f90183dd6ba8569763e75aff570da88caaf15e7234218d13e324
Files
-
258cfb05d707f90183dd6ba8569763e75aff570da88caaf15e7234218d13e324.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 158KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdqtooqp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
frbvjibd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE