Static task
static1
Behavioral task
behavioral1
Sample
5ec30548e1131d8bc671f66b9029d2dbd58e880848dad0679f445423249e897c.exe
Resource
win7-20241010-en
General
-
Target
5ec30548e1131d8bc671f66b9029d2dbd58e880848dad0679f445423249e897c.exe
-
Size
1.7MB
-
MD5
cf6ba1380a20d081dc42865c39678dbb
-
SHA1
3894a0d95656cb2f3f20e1d37b4ffac4d5300c54
-
SHA256
5ec30548e1131d8bc671f66b9029d2dbd58e880848dad0679f445423249e897c
-
SHA512
fb8097af9ebdd4c45f687c545ed401b6d1b8309239d9275e7881d3b41c1d883c4947f9127884112eb31d22547944ca3f2492b739b344bf377638fcf3633fb017
-
SSDEEP
24576:lz2LEp/4eurCeD5CwYtm1KPCM29fnpxkj8YqFki6FkkUS6fmXfD4PZN2+N:lMuQe/tm1TMQfpWjzFf6fmPEVN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5ec30548e1131d8bc671f66b9029d2dbd58e880848dad0679f445423249e897c.exe
Files
-
5ec30548e1131d8bc671f66b9029d2dbd58e880848dad0679f445423249e897c.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 88KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cjhupapx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
plkuxmiy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE