Static task
static1
Behavioral task
behavioral1
Sample
d4d9cdbaddd9158af222443d0498c07a731d48369bc02cd67ee63449aae550cdN.exe
Resource
win7-20240903-en
General
-
Target
d4d9cdbaddd9158af222443d0498c07a731d48369bc02cd67ee63449aae550cdN.exe
-
Size
1.8MB
-
MD5
e0a975913e6fe95db599be6f777a2820
-
SHA1
648091bd3f6859b864d7334f9cfb04f61cf8b85a
-
SHA256
d4d9cdbaddd9158af222443d0498c07a731d48369bc02cd67ee63449aae550cd
-
SHA512
0921a6ad3fe0cee46c3b89ca792c60c80f173d4cc3fd8794b677c953aa8ef01ea2edd5b568a2ab716b8ca767727e1d053551eee373e128a7638670e67d2913ac
-
SSDEEP
49152:EC+p8ZnCcpshPv4b7kQRzAuoRBCh9Oaa6R5KJpuXic97us:EC+GWM7kQRzSCaaaYKncP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d4d9cdbaddd9158af222443d0498c07a731d48369bc02cd67ee63449aae550cdN.exe
Files
-
d4d9cdbaddd9158af222443d0498c07a731d48369bc02cd67ee63449aae550cdN.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 146KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
inczkfzm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lwkyvfdh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE