Static task
static1
Behavioral task
behavioral1
Sample
80ea1e48313acf9319d608d3afe7733cd466d8451ad89b61c4b09c0f7c0764a2.exe
Resource
win7-20240708-en
General
-
Target
80ea1e48313acf9319d608d3afe7733cd466d8451ad89b61c4b09c0f7c0764a2
-
Size
1.9MB
-
MD5
7d31fad9b219d539d3c5915dff14a669
-
SHA1
dbe2d2eb17f70be6e9646e56c3a0085fe434988e
-
SHA256
80ea1e48313acf9319d608d3afe7733cd466d8451ad89b61c4b09c0f7c0764a2
-
SHA512
9124347d0f83df486ec445af499b2aa7b01b6a1c4a58d3bfa514988d3593144ccccc25a578908b1fa242389229eeffdb075cd65d45043a8ca74d3663e9adcd9e
-
SSDEEP
24576:rS8nJgJ1C6crpULN+/lCHyXKTD0eja0Qtp5sjH9NWtlJl8XPBP4My9GdOTcc4Fq:rOJKK8/lCH/T3alLshNWzJlL7bTs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80ea1e48313acf9319d608d3afe7733cd466d8451ad89b61c4b09c0f7c0764a2
Files
-
80ea1e48313acf9319d608d3afe7733cd466d8451ad89b61c4b09c0f7c0764a2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ordjlgkm Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zsnxwtzn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE