Static task
static1
Behavioral task
behavioral1
Sample
9223e6642c6c4e239fbec7aaf3d59b5d57c58719de51c87c9de77406c6e113af.exe
Resource
win7-20240903-en
General
-
Target
9223e6642c6c4e239fbec7aaf3d59b5d57c58719de51c87c9de77406c6e113af.exe
-
Size
1.8MB
-
MD5
e2af138073530d8265de0923f248daef
-
SHA1
dee836706bc5180b9601755577cd3d26cb33600e
-
SHA256
9223e6642c6c4e239fbec7aaf3d59b5d57c58719de51c87c9de77406c6e113af
-
SHA512
7d0f4f0e335d934b3c48a87e646dc5e81d53ba18760458ba5ae9682e1f896d50b43c23a9dadf3acd068381f146b26055232b83e086ac9f4b3ea2398711090166
-
SSDEEP
49152:DYyHFu0+QUysir6UbKdXcg8AP2h4mIgZ:x3Uysxy8XkQ24Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9223e6642c6c4e239fbec7aaf3d59b5d57c58719de51c87c9de77406c6e113af.exe
Files
-
9223e6642c6c4e239fbec7aaf3d59b5d57c58719de51c87c9de77406c6e113af.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 158KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wfudkuhl Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vqykiuzq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE