Static task
static1
Behavioral task
behavioral1
Sample
5b925045e850cc5704bbe0d7d9ebab9372699b97a54a29832b09c01c2e868433.exe
Resource
win7-20240903-en
General
-
Target
5b925045e850cc5704bbe0d7d9ebab9372699b97a54a29832b09c01c2e868433.exe
-
Size
1.8MB
-
MD5
03bd155c22cddc63aa7414a50b98fe0e
-
SHA1
25bea392faefc9256150b8732c83a4a18d1fd9e2
-
SHA256
5b925045e850cc5704bbe0d7d9ebab9372699b97a54a29832b09c01c2e868433
-
SHA512
33f530d448b469e63a6d2e34ee0429ff1714b234166825947375d2f23ced5e4d9578bc47dc5650a9fd891e4b265301eafc1b29d9af8364fdd2d626aaa8d3f70a
-
SSDEEP
49152:VAtpNvzezLU7G5fG6bmwdguhKYJxzpjaXizIohtvqCWlg:e16kG5ubyKipjaXCvxW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b925045e850cc5704bbe0d7d9ebab9372699b97a54a29832b09c01c2e868433.exe
Files
-
5b925045e850cc5704bbe0d7d9ebab9372699b97a54a29832b09c01c2e868433.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 158KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvinbpzl Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ishsnzkc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE