Static task
static1
Behavioral task
behavioral1
Sample
03359670d8c82b48d50c6c70fa6444ea6fac4094fad0813cea78126ad7f1324c.exe
Resource
win7-20240903-en
General
-
Target
03359670d8c82b48d50c6c70fa6444ea6fac4094fad0813cea78126ad7f1324c.exe
-
Size
1.8MB
-
MD5
7be2cc687eef8d6dd4b4e7d94daf7450
-
SHA1
ece181376be01b7acdef5563c63e339ccd1b52ec
-
SHA256
03359670d8c82b48d50c6c70fa6444ea6fac4094fad0813cea78126ad7f1324c
-
SHA512
584a6ccec981fc891beb47b54449a9cd03f63b48e4f7feaef3daaf6c176f4d4d79de333f11f934ec5516f1d94618c4ccb83796d5a7b8a7ea2a5a4041a13ef42a
-
SSDEEP
24576:9bUrK9XjlfMDRJ0sJ2h7EbPAoGl4UXN47WeG4W8jm4goiI1tLxM2mbDzznPE3U37:9bpdBMDDlJA+TRmejLxPmbPcuL1lBb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 03359670d8c82b48d50c6c70fa6444ea6fac4094fad0813cea78126ad7f1324c.exe
Files
-
03359670d8c82b48d50c6c70fa6444ea6fac4094fad0813cea78126ad7f1324c.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tuquznjb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nuggfafy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE