Static task
static1
Behavioral task
behavioral1
Sample
9097b54392451d73b37577c5f606e5959c62deab4f359cf671adc62897452b49.exe
Resource
win7-20241010-en
General
-
Target
9097b54392451d73b37577c5f606e5959c62deab4f359cf671adc62897452b49
-
Size
1.8MB
-
MD5
ef791b7d99a63481993ad96a9f043e71
-
SHA1
15797d3eb2e5104cb3a518aed8df3f77fdda010d
-
SHA256
9097b54392451d73b37577c5f606e5959c62deab4f359cf671adc62897452b49
-
SHA512
59897ef989594b8261fe0ce15515e1784f8943155c672dc68247412a6afd888723114c581b5adac5df1c469d1a6ba12f3a9d3e9c79a3b2095acd0801e82c3377
-
SSDEEP
24576:++jqb7UQPkDkEZgfbASVQRBWVJTyPB/g2WUay/PjwudMbzOaw/FefOO5EV0F5:tjo7UQPwkW9zXWzoPkuo/w4fp5g0F5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9097b54392451d73b37577c5f606e5959c62deab4f359cf671adc62897452b49
Files
-
9097b54392451d73b37577c5f606e5959c62deab4f359cf671adc62897452b49.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 152KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lbasanxu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
inkucyiw Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE