Static task
static1
Behavioral task
behavioral1
Sample
a7850de3122509e3528e71705def837359e1bb9678c9876442e852759ba5d735.exe
Resource
win7-20240903-en
General
-
Target
a7850de3122509e3528e71705def837359e1bb9678c9876442e852759ba5d735
-
Size
2.9MB
-
MD5
72378a6fc2cca85e08616b5c9396df67
-
SHA1
589c3789dd94017ba9f4bed50969405d9d303c91
-
SHA256
a7850de3122509e3528e71705def837359e1bb9678c9876442e852759ba5d735
-
SHA512
b58558deca75257e7f6aefbf887f8799bdaa4ef51b50f9d6b9cc13bf9d635f688213162ad1c7e703f690142947b9b130c5d448c08b7c70179ef2ef7cf26beb4f
-
SSDEEP
49152:CAERMgJp9NfWPHu2oAYf69x3z7OVM13whXJ8PRoaPx5Q:C7MgJpLfOu2oL69NQMVwh58PmaPs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a7850de3122509e3528e71705def837359e1bb9678c9876442e852759ba5d735
Files
-
a7850de3122509e3528e71705def837359e1bb9678c9876442e852759ba5d735.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 159KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upafhrng Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zwxotxts Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE