Static task
static1
Behavioral task
behavioral1
Sample
572db7adb908684deed9efdafd67b3bf601203d5f5fc7836403ceb713c6a3777.exe
Resource
win7-20241010-en
General
-
Target
572db7adb908684deed9efdafd67b3bf601203d5f5fc7836403ceb713c6a3777.exe
-
Size
4.2MB
-
MD5
6f3abf72b45579ad895e717f3725d31d
-
SHA1
a6117b18c33237012d24a646594e38109a368c5d
-
SHA256
572db7adb908684deed9efdafd67b3bf601203d5f5fc7836403ceb713c6a3777
-
SHA512
77fc4968078b509206940e19c295bfab4f459cb1bc0ebb4b1a7e21eb72c6a2758581553bf3260cbf11ef25ed8f93670d06fd95f605826501f948612f82899958
-
SSDEEP
98304:rbZE67NfqqvnyjS+YxDSFC0r1m8SZcZdZJroTqkgnb5mRq287uV:h9B5PyjS+YxDSFC0rHSWZ3VoTqkS5c6u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 572db7adb908684deed9efdafd67b3bf601203d5f5fc7836403ceb713c6a3777.exe
Files
-
572db7adb908684deed9efdafd67b3bf601203d5f5fc7836403ceb713c6a3777.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ozcvkfvj Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iubdojmz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE