Static task
static1
Behavioral task
behavioral1
Sample
9eca0e2bd782913827ce638c87f2ef68c2fe9957aaf49e356b3f5b172c1102ae.exe
Resource
win7-20241010-en
General
-
Target
9eca0e2bd782913827ce638c87f2ef68c2fe9957aaf49e356b3f5b172c1102ae.exe
-
Size
2.8MB
-
MD5
e305ba7301ef45062d8615bd449c0217
-
SHA1
c53aa75fc15e55f73b0d12ed4594cfea828a18b3
-
SHA256
9eca0e2bd782913827ce638c87f2ef68c2fe9957aaf49e356b3f5b172c1102ae
-
SHA512
02570d614c1fedccf8e78e7f8304b85a8b277b2b5e331b67ec1ff146db27acb76bdfaead7ffa57cccb6b9e1193ff7433f762c765eefd8668ac2694b71bc8fab2
-
SSDEEP
49152:rhzB899exC/Qk3dI57QNiJcauPMAnc1ek25p3:f8LexC/93dI53aHMZbu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9eca0e2bd782913827ce638c87f2ef68c2fe9957aaf49e356b3f5b172c1102ae.exe
Files
-
9eca0e2bd782913827ce638c87f2ef68c2fe9957aaf49e356b3f5b172c1102ae.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qfozarky Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
htkseqbh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE