Static task
static1
Behavioral task
behavioral1
Sample
5f8501e09131d374d8c6944c2d4db61ead94a05ede3ca2e3c60b61478b6b9b9a.exe
Resource
win7-20240903-en
General
-
Target
5f8501e09131d374d8c6944c2d4db61ead94a05ede3ca2e3c60b61478b6b9b9a.exe
-
Size
2.7MB
-
MD5
b999c72b5042201219eb2dd152dc5a06
-
SHA1
d05baf5596576ebb24206f5f6ebd4ac68ff42279
-
SHA256
5f8501e09131d374d8c6944c2d4db61ead94a05ede3ca2e3c60b61478b6b9b9a
-
SHA512
0d2e50b6142d804fe04d55274208b8340b6bb38f4929d2828615161259dfb2589f426d5ce705b5a2c7f13087bf6588e28ac8f56f3ed1006df88135a5a4298945
-
SSDEEP
49152:+x4/1Da418cVGckXouoQbIg23UrStIuy242CKk:+x4/ha418cVGckXouurfk2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5f8501e09131d374d8c6944c2d4db61ead94a05ede3ca2e3c60b61478b6b9b9a.exe
Files
-
5f8501e09131d374d8c6944c2d4db61ead94a05ede3ca2e3c60b61478b6b9b9a.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewkemklx Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ftkhlxcz Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE