Static task
static1
Behavioral task
behavioral1
Sample
686c2705e22fc7bafa4b72f9186647d6a87e2f8bf48284f68c42c5efbf315adc.exe
Resource
win7-20240903-en
General
-
Target
686c2705e22fc7bafa4b72f9186647d6a87e2f8bf48284f68c42c5efbf315adc
-
Size
1.8MB
-
MD5
b74b5b7cc002895b1f65f88925f0d242
-
SHA1
5e684ea9fc6f977ad8299f4585e4622bb4aec175
-
SHA256
686c2705e22fc7bafa4b72f9186647d6a87e2f8bf48284f68c42c5efbf315adc
-
SHA512
7d450eb04fd5ece2c7ae9c17428c51316df5791e67a24ca05011745cb680a8f2a5b48f317f439059f2277c4a81fee7bc6db7f82a9f28231a02abf2ee7101f5ed
-
SSDEEP
49152:LwAPTbvGkIyzS5k+dFDGZ0fN0j/PX4fFwFbECY/hQFB:ZPTjGktzS5pGOl0TwSbw0B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 686c2705e22fc7bafa4b72f9186647d6a87e2f8bf48284f68c42c5efbf315adc
Files
-
686c2705e22fc7bafa4b72f9186647d6a87e2f8bf48284f68c42c5efbf315adc.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zayzuoyq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asebjbps Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE