Static task
static1
Behavioral task
behavioral1
Sample
cafb60920939bd2079d96f2e6e73f87632bc15bd72998f864e8968f7aab9623b.exe
Resource
win7-20240708-en
General
-
Target
cafb60920939bd2079d96f2e6e73f87632bc15bd72998f864e8968f7aab9623b.exe
-
Size
1.7MB
-
MD5
40f8c17c136d4dc83b130c9467cf6dcc
-
SHA1
e9b6049aa7da0af9718f2f4ae91653d9bac403bb
-
SHA256
cafb60920939bd2079d96f2e6e73f87632bc15bd72998f864e8968f7aab9623b
-
SHA512
6760a0752957535ec45ce3307e31569ac263eb73157d6a424d6e30647651a4e93db7c0378028d9e0ce07e65a357d2bb81047064ccda2f6a13fa7402ee7794c2d
-
SSDEEP
49152:IkXhu5J6iLKcMu/FQHujIytryx1GLMfzhh9JHTJ6qyrBbL:I0i9/COjIhkMfzhhMf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cafb60920939bd2079d96f2e6e73f87632bc15bd72998f864e8968f7aab9623b.exe
Files
-
cafb60920939bd2079d96f2e6e73f87632bc15bd72998f864e8968f7aab9623b.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
kernel32
lstrcpy
Sections
Size: 34KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kzyimikk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vgdirfva Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE