Static task
static1
Behavioral task
behavioral1
Sample
37fddb481b298dfa869ceb93f2887baa143da1698b87ff0dc896a477569e1eda.exe
Resource
win7-20240903-en
General
-
Target
37fddb481b298dfa869ceb93f2887baa143da1698b87ff0dc896a477569e1eda.exe
-
Size
3.1MB
-
MD5
04a9756bf8284415956505d7613bc2fc
-
SHA1
f804bdff226e17789e3f29cb57feebbb4066a678
-
SHA256
37fddb481b298dfa869ceb93f2887baa143da1698b87ff0dc896a477569e1eda
-
SHA512
08f69dc7c3071778061782a2cf395f060ee624e078aad713e1c82860738f3711c9e1c99df14a5b301282014cb294720e940325242f46e683f0bfd730f903b471
-
SSDEEP
49152:PZAjRi4ef0vGMcW8FCE6a/JzcDSs8Fcm98UXIXkJk3:xCiRGGM38F+SbFlaWk3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37fddb481b298dfa869ceb93f2887baa143da1698b87ff0dc896a477569e1eda.exe
Files
-
37fddb481b298dfa869ceb93f2887baa143da1698b87ff0dc896a477569e1eda.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jxpcnbcn Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wfyfyezi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE