Static task
static1
Behavioral task
behavioral1
Sample
fe08340a99699f03b267bbe210c4c2f915578fa5e794cac73644eaa7afe73455.exe
Resource
win7-20240903-en
General
-
Target
fe08340a99699f03b267bbe210c4c2f915578fa5e794cac73644eaa7afe73455.exe
-
Size
2.0MB
-
MD5
19109c985000337de47d9c4f511af347
-
SHA1
dee3d8d9335d7f08aab7d82de5b516d1ac595737
-
SHA256
fe08340a99699f03b267bbe210c4c2f915578fa5e794cac73644eaa7afe73455
-
SHA512
d6d4ba68bea18372e15d37bb06300d092331e763eefb3253c3df580c7a062460bd9d8df3daa91a6fee017431ad9a0de7e886a97bab8a91f51013882b1dbf9adf
-
SSDEEP
49152:aQzNU7+uxkLbYTZjRmm8QtdPw3q1FQzSsyqqkTvT67YO7t:lzNU7+uK3IyV30FQuIqkDT6pt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe08340a99699f03b267bbe210c4c2f915578fa5e794cac73644eaa7afe73455.exe
Files
-
fe08340a99699f03b267bbe210c4c2f915578fa5e794cac73644eaa7afe73455.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nlfbzspb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ienpyzig Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE