Static task
static1
Behavioral task
behavioral1
Sample
13c3705c5996fbfc93eba91b33e4a3b3fc9ce059800b3b06519f0fd947747362.exe
Resource
win7-20241010-en
General
-
Target
13c3705c5996fbfc93eba91b33e4a3b3fc9ce059800b3b06519f0fd947747362.exe
-
Size
1.8MB
-
MD5
d4f2818e6d0822d9ccf8d4ec4a601c90
-
SHA1
d161cfd3dd79d81a15822f73297b0a73c0b068d2
-
SHA256
13c3705c5996fbfc93eba91b33e4a3b3fc9ce059800b3b06519f0fd947747362
-
SHA512
5d81fc5a6ac11de7a9a87de075d8fa46f25c4b4eaea506bef362025e19bd98f24c0a9036acda937fb083661a43b00319f76dad23de58f6e7a09fb61af305b8e3
-
SSDEEP
49152:vuYKP41uIfWVr1H9muoLiwthIySOt8r+wc3Tfvuv1WNQsU/xWlEw:vf84IiWB1IuoL7SOY+xjfvgxrwF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13c3705c5996fbfc93eba91b33e4a3b3fc9ce059800b3b06519f0fd947747362.exe
Files
-
13c3705c5996fbfc93eba91b33e4a3b3fc9ce059800b3b06519f0fd947747362.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mlgfdbux Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qftbestz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE