Static task
static1
Behavioral task
behavioral1
Sample
8310a7193b9e91be4355931fe56b6f47b98839621df007f1bd87dda98dff79ed.exe
Resource
win7-20240729-en
General
-
Target
8310a7193b9e91be4355931fe56b6f47b98839621df007f1bd87dda98dff79ed.exe
-
Size
1.8MB
-
MD5
4a621d7648695348889cf9b0af6c97eb
-
SHA1
428888c9ef81ec58bfc32036013520465c66a9b7
-
SHA256
8310a7193b9e91be4355931fe56b6f47b98839621df007f1bd87dda98dff79ed
-
SHA512
f8d4f403f7f6ac220c0653a4fa78eb363a7bf7c4f3aab3a70b1393bc183f94bff186549ef5fe8899deb954f325a8f1c31321d5af36f40b3b983b5999309e4784
-
SSDEEP
49152:862xpazZ1LTxUlnl/+Ch0C3kQmBspDrrY:8N+LdUlnA40QmBEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8310a7193b9e91be4355931fe56b6f47b98839621df007f1bd87dda98dff79ed.exe
Files
-
8310a7193b9e91be4355931fe56b6f47b98839621df007f1bd87dda98dff79ed.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wocmkron Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kmsqiyyc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE