Static task
static1
Behavioral task
behavioral1
Sample
5ff31144ee74d5a4f3907af9cac299f3.exe
Resource
win7-20240903-en
General
-
Target
5ff31144ee74d5a4f3907af9cac299f3.exe
-
Size
1.8MB
-
MD5
5ff31144ee74d5a4f3907af9cac299f3
-
SHA1
9a7b51551a6bd20f47b264a59f941606eecb4d48
-
SHA256
59a902b215031fd5764c623afc91f17f2b1c9b98b4654d78b03851ad75f417b6
-
SHA512
7b77d6cbea1e81dd6a08df5a688138dc301d834d93f3cb4f5471dee3a8a6cbe8df53615cb7dea4fbd116aca6b869fb5a3f6940d91823b4b6895d2d4c31d1b12a
-
SSDEEP
49152:paJh6XxJgzAwjvciG40z7Ipr8/BpV5A5gcGkar7N:paJOqAwj0iQi4/3GMr7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ff31144ee74d5a4f3907af9cac299f3.exe
Files
-
5ff31144ee74d5a4f3907af9cac299f3.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 146KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kyudyrks Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fowspmcj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE