Static task
static1
Behavioral task
behavioral1
Sample
f0ff20abe90c87f8d45682a3a8d8551a0a296fedc6d6c15f3398ad410bf356d4.exe
Resource
win7-20240903-en
General
-
Target
f0ff20abe90c87f8d45682a3a8d8551a0a296fedc6d6c15f3398ad410bf356d4
-
Size
1.7MB
-
MD5
2f1804745c27ac741390be5b144747c7
-
SHA1
36ab8f8b9acf2d8756fb75250cb19e9aa9ca3e43
-
SHA256
f0ff20abe90c87f8d45682a3a8d8551a0a296fedc6d6c15f3398ad410bf356d4
-
SHA512
32a1f408b41c6ecb0ec933898d69db37e6182ab7f5c90873049cef647091bcbc43923dcfbd885e559dc8b55f6234fd8392be4ae33080fd90aa7436884cad4470
-
SSDEEP
24576:aG1bAthoEakI4PhtWP3DrF6RHNo14OZUgrZLmY1wlPpRvC/GCyd1vaXrbzbE3Isv:a+EhaH4PWPTZewjm7d3Rzwo3IzMVUg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0ff20abe90c87f8d45682a3a8d8551a0a296fedc6d6c15f3398ad410bf356d4
Files
-
f0ff20abe90c87f8d45682a3a8d8551a0a296fedc6d6c15f3398ad410bf356d4.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
chiskzdy Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qihcerpz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE