Static task
static1
Behavioral task
behavioral1
Sample
1dd04b677a8e124c336a3bb427cae263a81f692d8b5d2e0f5d33360de2763316.exe
Resource
win7-20240903-en
General
-
Target
1dd04b677a8e124c336a3bb427cae263a81f692d8b5d2e0f5d33360de2763316
-
Size
2.0MB
-
MD5
a787d0a91b5362989ce71013388683e5
-
SHA1
f962241a7392018016bbdbbc2c4f853ceb8f4a3a
-
SHA256
1dd04b677a8e124c336a3bb427cae263a81f692d8b5d2e0f5d33360de2763316
-
SHA512
9357a525424ec4a96a375418c9730e5fa0cc3d81c626c85c381085cfe4e8a5ed985ec2a3a4d36d4929f6dfe59484bfa8165b2aa245a99fa8def0677acaf4ddf4
-
SSDEEP
49152:z0xl1u1chKwuPDjJXAKrtsyOf1G25Wxo4cC:gRu140dnpW0KIc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1dd04b677a8e124c336a3bb427cae263a81f692d8b5d2e0f5d33360de2763316
Files
-
1dd04b677a8e124c336a3bb427cae263a81f692d8b5d2e0f5d33360de2763316.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 413KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bwamzikp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xwfcfjaf Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE