Static task
static1
Behavioral task
behavioral1
Sample
b42e54290ed4aad3ce47fee33a85c5438736e76c26f85a6e422a9da60203f219.exe
Resource
win7-20241023-en
General
-
Target
b42e54290ed4aad3ce47fee33a85c5438736e76c26f85a6e422a9da60203f219.exe
-
Size
1.7MB
-
MD5
d8c2dbe1dc35a7cdac6842d48fecb333
-
SHA1
e2c05c1cd61c9085f23f1462acdc10444c52dc0a
-
SHA256
b42e54290ed4aad3ce47fee33a85c5438736e76c26f85a6e422a9da60203f219
-
SHA512
b90e0dbc88945aa4c75cfe4c9b6b8e9046a363eaca6797a8fe44b27e9c9224e06b1380465cb61439256f64fce05f8d5006bb932101b3d42970cb5db6a0ae5dc7
-
SSDEEP
49152:KVGfuwDAsjKlaPIfyJsEQgRT4+Agta6x:IGfj9PIyWEfRTUw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b42e54290ed4aad3ce47fee33a85c5438736e76c26f85a6e422a9da60203f219.exe
Files
-
b42e54290ed4aad3ce47fee33a85c5438736e76c26f85a6e422a9da60203f219.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 146KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jykvwyex Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
flkzpzss Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE