Static task
static1
Behavioral task
behavioral1
Sample
62b0972debc28c978b60cdc3d8654e36.exe
Resource
win7-20241010-en
General
-
Target
62b0972debc28c978b60cdc3d8654e36.exe
-
Size
1.8MB
-
MD5
62b0972debc28c978b60cdc3d8654e36
-
SHA1
639e84e6ad995b796afd315854b2975403f44019
-
SHA256
27d7ce1e09a9fd9540e512911df89895ec1dd9cd04c9ccea6228c6b01b2af69a
-
SHA512
4cef8fd0acc070d8704ad9cfcb0e1f1df273a514b18a92f7907892e0a053e2695460e57453e84068739c500f0b9032af309f551cb75b2f4bc52f970b291788f6
-
SSDEEP
49152:5idxW/+91QTjizfU75bod4nHW4h9L+hDQNLGP96KMc:Cx6+91e9PDp+hyg94
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62b0972debc28c978b60cdc3d8654e36.exe
Files
-
62b0972debc28c978b60cdc3d8654e36.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 146KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pheetsai Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yxxtlodd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE