Static task
static1
Behavioral task
behavioral1
Sample
1ccdd1cd66c2f81632a1ca01e966d71b7d7ef6e27ca73214319fd2d6303e1b1d.exe
Resource
win7-20241010-en
General
-
Target
1ccdd1cd66c2f81632a1ca01e966d71b7d7ef6e27ca73214319fd2d6303e1b1d
-
Size
1.7MB
-
MD5
1a0eded5ce6f8eb8e3511a33950d857d
-
SHA1
cabc995ab1a44aa1d8a33689b3197dec2539ca90
-
SHA256
1ccdd1cd66c2f81632a1ca01e966d71b7d7ef6e27ca73214319fd2d6303e1b1d
-
SHA512
141704bc409b89089b8d5dd0d9e040f88060bad9736417fbe7c26ee860d3820d008d5a0621a374868a6a76cf049367b227ba6630789b3af1172f31f8f9d17863
-
SSDEEP
49152:pTqitOgI++S8s5pABXYQ+X5SKqIvX4AY2Hs:puitEbSDABX0SKqIom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ccdd1cd66c2f81632a1ca01e966d71b7d7ef6e27ca73214319fd2d6303e1b1d
Files
-
1ccdd1cd66c2f81632a1ca01e966d71b7d7ef6e27ca73214319fd2d6303e1b1d.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kjggphcf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
poajargc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE