Static task
static1
Behavioral task
behavioral1
Sample
7eafd68e2bbc31f1594debcbbbaa7d782436befb508e7672e70dadc075a17f20.exe
Resource
win7-20240903-en
General
-
Target
7eafd68e2bbc31f1594debcbbbaa7d782436befb508e7672e70dadc075a17f20.exe
-
Size
1.8MB
-
MD5
5d5b34c976fa92c5652722de16d2e98b
-
SHA1
dc9e11721bb7920305e240ba778b8b0d903f3a3a
-
SHA256
7eafd68e2bbc31f1594debcbbbaa7d782436befb508e7672e70dadc075a17f20
-
SHA512
514757c5dd3974fdbc7cdc11aae9783efea0630faeefa9a8a7041752ffd8893e3499b691f285164fc8ed90cc49d97e3a6d9d6678145b75967abd62b4f61d2291
-
SSDEEP
49152:J6cMo8LwRCUnx8quXy42AKEPRDrRZmUWC6v:QcZkJUn0XyxAKy/mp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7eafd68e2bbc31f1594debcbbbaa7d782436befb508e7672e70dadc075a17f20.exe
Files
-
7eafd68e2bbc31f1594debcbbbaa7d782436befb508e7672e70dadc075a17f20.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 88KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ptovvlym Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ufuanyoz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE