Static task
static1
Behavioral task
behavioral1
Sample
b191a7db52b4b5bc6e5130fe6e1297a50564430d17e5d16dd19ea3f5c0e623b2.exe
Resource
win7-20240903-en
General
-
Target
b191a7db52b4b5bc6e5130fe6e1297a50564430d17e5d16dd19ea3f5c0e623b2.exe
-
Size
1.8MB
-
MD5
a29c95a9c8404c28175d5914c9452c4a
-
SHA1
aa89471c5dcfbd31ee480734cc69078c70e14ca2
-
SHA256
b191a7db52b4b5bc6e5130fe6e1297a50564430d17e5d16dd19ea3f5c0e623b2
-
SHA512
168e40ae50b1da5c69eda97a29c8ceec6a801965c0572a3ffbe12684089f1f65963ef0fa50f752adf9c9d88215c0c05aebdeb9219d18bb3fd9443f2bc6ccf155
-
SSDEEP
49152:anuo3wzZrd9eSGQSfuSp0msUg99Kr3UHo3u:aLUZrd9eSSfuSp0m89H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b191a7db52b4b5bc6e5130fe6e1297a50564430d17e5d16dd19ea3f5c0e623b2.exe
Files
-
b191a7db52b4b5bc6e5130fe6e1297a50564430d17e5d16dd19ea3f5c0e623b2.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
righupot Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tulgbhkc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE