Static task
static1
Behavioral task
behavioral1
Sample
8ec6d77a18cdc5f0bced1a5efc38a3295a9637e42dd2594d3188e3a64aed532d.exe
Resource
win7-20241010-en
General
-
Target
8ec6d77a18cdc5f0bced1a5efc38a3295a9637e42dd2594d3188e3a64aed532d
-
Size
2.8MB
-
MD5
510727d3e46829b6ef96d0f71a89ff62
-
SHA1
98d7e5831b8a2207227268b13284e5858adbf9b0
-
SHA256
8ec6d77a18cdc5f0bced1a5efc38a3295a9637e42dd2594d3188e3a64aed532d
-
SHA512
bdd174d6c9caad9e164f2f3ae78cfa2d20ac33b940b09216f75d8fc1ceac6c4911b30445172c334073f8e209871c288b9f483381aa319ad6a378ad257204640e
-
SSDEEP
49152:RJVu43N9quLjV9p0X0XpNdXOF3bwUoIWmRsdCmlBSUz:Rn3N9DV9p0X0EFEf/BS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8ec6d77a18cdc5f0bced1a5efc38a3295a9637e42dd2594d3188e3a64aed532d
Files
-
8ec6d77a18cdc5f0bced1a5efc38a3295a9637e42dd2594d3188e3a64aed532d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 159KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
molkktdk Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cjarawwr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE