Static task
static1
Behavioral task
behavioral1
Sample
b51c39f9a5b2176d0e3a06036460db52d19a94cb4827cf523c00a2e567fd586e.exe
Resource
win7-20241010-en
General
-
Target
b51c39f9a5b2176d0e3a06036460db52d19a94cb4827cf523c00a2e567fd586e.exe
-
Size
4.1MB
-
MD5
eeafcff9019f6db830551b94ded6ec31
-
SHA1
0177b0c665ce005f1a82cea394af45fcc798331e
-
SHA256
b51c39f9a5b2176d0e3a06036460db52d19a94cb4827cf523c00a2e567fd586e
-
SHA512
b37a82d84d1573d908cbbb57422bb4965329204f84452083bfdaa346feeca77db147eae51528d292c7ed477c3c97b0a88d48c23cde522208d200db768f6ecf55
-
SSDEEP
98304:lF1QhWOfAPeI5LcmjMpfMs5EGzuKs7MJeSfaLnw:l8hWQA2I5pMpfMs5dzs4oSfaLnw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b51c39f9a5b2176d0e3a06036460db52d19a94cb4827cf523c00a2e567fd586e.exe
Files
-
b51c39f9a5b2176d0e3a06036460db52d19a94cb4827cf523c00a2e567fd586e.exe.exe .ps1 windows:4 windows x86 arch:x86 polyglot
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vjuwrkbf Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ukxgiinv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE