Static task
static1
Behavioral task
behavioral1
Sample
d729e5ca94577644c249e1534a56301da41832b32e81bc4866742a908359238e.exe
Resource
win7-20240708-en
General
-
Target
d729e5ca94577644c249e1534a56301da41832b32e81bc4866742a908359238e.exe
-
Size
1.8MB
-
MD5
ff8eb93e00cf8c24c14b4a9b713f2115
-
SHA1
928bf41910af49788bfa067e0302312b33c9fb5b
-
SHA256
d729e5ca94577644c249e1534a56301da41832b32e81bc4866742a908359238e
-
SHA512
1147cb55542da0a15c26d60f2a8f4e69580259dccdfb69ed938666123b679f9fad2cf169aafaf47286721c67fade42b3e87c5c2a089bcd239513c5b3074430a9
-
SSDEEP
49152:2EH/jBAM9sx3cSxzRDma8FUc/g3k1skFtnLJq1rjf:3fqgWfxtDB8Fs01skFtn1mj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d729e5ca94577644c249e1534a56301da41832b32e81bc4866742a908359238e.exe
Files
-
d729e5ca94577644c249e1534a56301da41832b32e81bc4866742a908359238e.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 88KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lgjpmlrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fjrpqkrp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE