Static task
static1
Behavioral task
behavioral1
Sample
7c6db97652d5ad2abf6cb771b616013a2c307988779024c735ffc27f17736afe.exe
Resource
win7-20240903-en
General
-
Target
7c6db97652d5ad2abf6cb771b616013a2c307988779024c735ffc27f17736afe
-
Size
2.8MB
-
MD5
d25093727ab627d2341cd201fe50aced
-
SHA1
6b07b24d1f8ef46df171bba3224bd8dee8cdf4eb
-
SHA256
7c6db97652d5ad2abf6cb771b616013a2c307988779024c735ffc27f17736afe
-
SHA512
88370155272ffa5c05254d08b1e20e84454abdab54cb456bcd6db3ad621f2dd315a92c2f861d3b923bdd4ba769952d92f587afa30b2d6d736fa6b319d7ede714
-
SSDEEP
49152:+L54nO2j2+W+/3/9ycpKfY/X6iP/Rm3bVib3jWLtXFIW:+L54nOM2+WqFM4qiAi3j+1F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c6db97652d5ad2abf6cb771b616013a2c307988779024c735ffc27f17736afe
Files
-
7c6db97652d5ad2abf6cb771b616013a2c307988779024c735ffc27f17736afe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wgrsythr Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kmjrnlwc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE