Static task
static1
Behavioral task
behavioral1
Sample
1bb639cb3c6c357b238c61fbd742f6beb2f507d5d6b163530b5614f33e2aa917.exe
Resource
win7-20240903-en
General
-
Target
1bb639cb3c6c357b238c61fbd742f6beb2f507d5d6b163530b5614f33e2aa917
-
Size
2.1MB
-
MD5
4ddfc53d475c5f103ec6a3ad2150996c
-
SHA1
edd21765bf69a0285d69eaf3a36d36f53237a130
-
SHA256
1bb639cb3c6c357b238c61fbd742f6beb2f507d5d6b163530b5614f33e2aa917
-
SHA512
fcc7899021ff0f8203e54d5d1689fdf1bd860c57b86d687f46eca240ae21b20ab65bc1a0a49cba8bae08c919ad3a6c9aefa133f65b3ccd75aafd8aa6c7944400
-
SSDEEP
49152:sxipQMuIUJAceeqII2Pg6aoVrjDAKLC/XaWZi:fQ7I1cxI2Y6aoJA7P1Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bb639cb3c6c357b238c61fbd742f6beb2f507d5d6b163530b5614f33e2aa917
Files
-
1bb639cb3c6c357b238c61fbd742f6beb2f507d5d6b163530b5614f33e2aa917.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nwkctivf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pazeyiqy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE