Static task
static1
Behavioral task
behavioral1
Sample
9ae7c0e6dd75413b2613982cfa3f45ec27e5d069f8516f9a0bd74d11d52bda73.exe
Resource
win7-20240903-en
General
-
Target
9ae7c0e6dd75413b2613982cfa3f45ec27e5d069f8516f9a0bd74d11d52bda73.exe
-
Size
1.7MB
-
MD5
5260487861069ff2cbec2d4b822a7299
-
SHA1
3cfa4bcc01c7393e3aee3214b785e7187583fe73
-
SHA256
9ae7c0e6dd75413b2613982cfa3f45ec27e5d069f8516f9a0bd74d11d52bda73
-
SHA512
598a72f7bbd64323b10d15a655551502604c9430b4180575153a0bf14e8bbd17bcb1018e44bcd7450c37272e9815025e394c679f491da5cbfa1b2e52f10dd541
-
SSDEEP
49152:rzSKrMtbWWUPPNOktOLuVecLwj5PTdWdeENnSHRJ8:rm0RbOLuVlLMRTdWYENSH4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9ae7c0e6dd75413b2613982cfa3f45ec27e5d069f8516f9a0bd74d11d52bda73.exe
Files
-
9ae7c0e6dd75413b2613982cfa3f45ec27e5d069f8516f9a0bd74d11d52bda73.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 88KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edrmxlxv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uqkpdbcv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE