Static task
static1
Behavioral task
behavioral1
Sample
0a176414492da39e5927f9cd937a8fbbdae92201aa27f3a46e1402b4e3525edb.exe
Resource
win7-20241010-en
General
-
Target
0a176414492da39e5927f9cd937a8fbbdae92201aa27f3a46e1402b4e3525edb
-
Size
2.8MB
-
MD5
e698918d7efbab1f43d5285a6180d9e6
-
SHA1
a36bdce51a0ba9900a3efbb48a1b95e94f9a715e
-
SHA256
0a176414492da39e5927f9cd937a8fbbdae92201aa27f3a46e1402b4e3525edb
-
SHA512
486f4cd2e661b5a211c45f24ac1ace50590e2dcae264671d56d2e25e05665fbd6fc09598c05e64fc7799dfc30c6e8fb643f87eb504b2f242a0b3ae0be736a630
-
SSDEEP
49152:ZiFcIzbTJltcAofaRMPcdHEJjQCb+uWGDIUIJTEMzXvy:ZieIzbVltcAKaRMEdkJQCb3IUIJT/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a176414492da39e5927f9cd937a8fbbdae92201aa27f3a46e1402b4e3525edb
Files
-
0a176414492da39e5927f9cd937a8fbbdae92201aa27f3a46e1402b4e3525edb.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 159KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dnkixbtf Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cbrcwpop Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE