Static task
static1
Behavioral task
behavioral1
Sample
c0912300e948fd92974cbd70cd30dbd3f6203b267972873e842a85575da67d83.exe
Resource
win7-20241010-en
General
-
Target
c0912300e948fd92974cbd70cd30dbd3f6203b267972873e842a85575da67d83
-
Size
2.9MB
-
MD5
4b39d2d71c2dedc37373f79f8550538d
-
SHA1
19db9b323658dd48ec8c8a63466f5afe884b8550
-
SHA256
c0912300e948fd92974cbd70cd30dbd3f6203b267972873e842a85575da67d83
-
SHA512
4fef8ef8d770c0cc9034a5bb2e5e38d7de26820877e7d02b216256edab0458a6948ad9ee6112608774ec5fd61d6eaf6665ad8a98377c50020e96238b19f10729
-
SSDEEP
49152:gnEr/WCahF1mprlrSIc9Lu0aLbSzMqqBM0G+3EMCKIu:gnErOCahF1mpRvc9LudL+VqHG+9N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0912300e948fd92974cbd70cd30dbd3f6203b267972873e842a85575da67d83
Files
-
c0912300e948fd92974cbd70cd30dbd3f6203b267972873e842a85575da67d83.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pgrkxhpl Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oksfisur Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE