Static task
static1
Behavioral task
behavioral1
Sample
90e6d75b1a3721d4d8138bdaabc9b53d9b504eb4d8e0200202a9cdbc3a09547c.exe
Resource
win7-20240903-en
General
-
Target
90e6d75b1a3721d4d8138bdaabc9b53d9b504eb4d8e0200202a9cdbc3a09547c.exe
-
Size
1.8MB
-
MD5
6aa6f1174c848bb9c782864976f93914
-
SHA1
2af01fe8ca83acf0cf36506f20b8d651d16e25d6
-
SHA256
90e6d75b1a3721d4d8138bdaabc9b53d9b504eb4d8e0200202a9cdbc3a09547c
-
SHA512
c3c75afff0aa235f37b58d2e171c0042d8ce5e52f53f0c6dfbd262565ede02c9bc89dfa20e7a5382e654c58c52c86a79f6b62dc5c0e82f70971be417ef213ad2
-
SSDEEP
49152:AOfrkYq2DEd4PjtH2QuzyR8r1XBkqKVS3Av9hAKDByyIl:AOd9zWtvr1WqqSs9hBO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 90e6d75b1a3721d4d8138bdaabc9b53d9b504eb4d8e0200202a9cdbc3a09547c.exe
Files
-
90e6d75b1a3721d4d8138bdaabc9b53d9b504eb4d8e0200202a9cdbc3a09547c.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fmqhyqyr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pgisfmed Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE