Static task
static1
Behavioral task
behavioral1
Sample
b9ad4057bfc1fe97166722cf3d1956726d085fb3cb7d846f51dd61f2a17f6340N.exe
Resource
win7-20240903-en
General
-
Target
b9ad4057bfc1fe97166722cf3d1956726d085fb3cb7d846f51dd61f2a17f6340N.exe
-
Size
1.7MB
-
MD5
bc0ace9d945357220fef401b92e1b450
-
SHA1
e759f68d1448d77e8b7b671a8872e7a9fa422a13
-
SHA256
b9ad4057bfc1fe97166722cf3d1956726d085fb3cb7d846f51dd61f2a17f6340
-
SHA512
1b29d5ee525bedf3435fd3594c1c04485bd1c728731ccc1ca09fbaa03acde8a943cbd3a9939b50395b5ec137f233ce6561630fd8111524d268adb086fe7fa927
-
SSDEEP
24576:6GITJNPOj30QlodVMSG1cm7erUlj9Ros6Kz52FWRbr/ICp/yMLjiigjELHGHYbCV:6du3GCSG1PXlj9f6024RbrXSjELHGHw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9ad4057bfc1fe97166722cf3d1956726d085fb3cb7d846f51dd61f2a17f6340N.exe
Files
-
b9ad4057bfc1fe97166722cf3d1956726d085fb3cb7d846f51dd61f2a17f6340N.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
axobtyez Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ophjobxc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE