Static task
static1
Behavioral task
behavioral1
Sample
0000cdabf408b41641764df2b87ae5ac015b4a4046cafd45dad48f32e4f328d0.exe
Resource
win7-20241010-en
General
-
Target
0000cdabf408b41641764df2b87ae5ac015b4a4046cafd45dad48f32e4f328d0.exe
-
Size
1.8MB
-
MD5
c5cc7eed8c118c96fdcd85c6e22ae7b8
-
SHA1
3f3d332b3ee154e38a56397962bf1a18538e733c
-
SHA256
0000cdabf408b41641764df2b87ae5ac015b4a4046cafd45dad48f32e4f328d0
-
SHA512
4a0f9cdceb61c2ae72fa14492b500ee2e4d9808d481d3cb5a524b50e362cc1b15174ee3d8cd75ed9c67c3219a6c440b293cf0a28dda857610e7d0b74033fe5ca
-
SSDEEP
24576:vnfbSIuEEscoGlSAhgOXnxYeiRFtYMYNjKdYZDksrb8gOB6hTmCGjboMptQ9AIyL:vZEsbGVg+gF/YRd8gOkmCCB6ATHr8JQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0000cdabf408b41641764df2b87ae5ac015b4a4046cafd45dad48f32e4f328d0.exe
Files
-
0000cdabf408b41641764df2b87ae5ac015b4a4046cafd45dad48f32e4f328d0.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jjmfnjky Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rufaqwsg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE