Static task
static1
Behavioral task
behavioral1
Sample
768b8658cb7a5c056112d48a059a5c6ae85972b649e9b6cc6a32c5b5a5c37668.exe
Resource
win7-20240903-en
General
-
Target
768b8658cb7a5c056112d48a059a5c6ae85972b649e9b6cc6a32c5b5a5c37668.exe
-
Size
1.9MB
-
MD5
e90591702f90409093d1018b185f2391
-
SHA1
83a8219a1d5901c78ab5e62043c9b5572abec65d
-
SHA256
768b8658cb7a5c056112d48a059a5c6ae85972b649e9b6cc6a32c5b5a5c37668
-
SHA512
1a5a17ca9d1993b6d78167972f212e73583c4e7a34116b7fde09791126a5309e3a4605340b621becd35399e03a3be3bf32eff8ba0b85a4ed2afd5d7d042632ec
-
SSDEEP
49152:zXQenBHlkN/GVDdj5cpzcag+UXYvieQVq:zXnY/oDdj5cpzlg+UXb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 768b8658cb7a5c056112d48a059a5c6ae85972b649e9b6cc6a32c5b5a5c37668.exe
Files
-
768b8658cb7a5c056112d48a059a5c6ae85972b649e9b6cc6a32c5b5a5c37668.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 149KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eklitbhv Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tqisbufn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE