Static task
static1
Behavioral task
behavioral1
Sample
67a59e4492c6cea8d9cc98294dfe2cf6527da6f38fb66667ddbf22aa786ea047.exe
Resource
win7-20240903-en
General
-
Target
67a59e4492c6cea8d9cc98294dfe2cf6527da6f38fb66667ddbf22aa786ea047.exe
-
Size
4.2MB
-
MD5
8f39a8aa9721bc356ef028cc3aec52f6
-
SHA1
cc7fe29c172df3fb7507bab549095722c3408ec1
-
SHA256
67a59e4492c6cea8d9cc98294dfe2cf6527da6f38fb66667ddbf22aa786ea047
-
SHA512
740d04a82e73ba705515804e438a9282be964ad363170af8c9192c135537f613d47e415d4a68d18d3ce0ec0db22f817a59b9f3c6a54c52b1fe058748ad7748b3
-
SSDEEP
98304:hGZ16E+n3qlVmxQ+kqUuPIlAUHsyKp21eWsuIbFL/Tlt:h0S6lVv1qdIGMD1eWsuI9lt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 67a59e4492c6cea8d9cc98294dfe2cf6527da6f38fb66667ddbf22aa786ea047.exe
Files
-
67a59e4492c6cea8d9cc98294dfe2cf6527da6f38fb66667ddbf22aa786ea047.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edxcvrdu Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
syqfiudc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE