Static task
static1
Behavioral task
behavioral1
Sample
f0864fdc2ad33b2b2b0228a4eaff187d4a8b7cf80ceaa4c9d6039357f8288a38.exe
Resource
win7-20240903-en
General
-
Target
f0864fdc2ad33b2b2b0228a4eaff187d4a8b7cf80ceaa4c9d6039357f8288a38.exe
-
Size
4.3MB
-
MD5
e29a86043d208815a869ca5659d6894c
-
SHA1
3c9757b3785b7f6f46d80ad29d454f0798e689de
-
SHA256
f0864fdc2ad33b2b2b0228a4eaff187d4a8b7cf80ceaa4c9d6039357f8288a38
-
SHA512
e1837c24231efbd96999f0cadcb4eda7d4520fc8eee22c65f0a1bc55b72ebdac2e1842bb3b016d4c0a6295ac524bf3af526f46930dd18bcba39e13e2c79a67be
-
SSDEEP
98304:JxOXj3eSSw0z20voCNnseZ/T0jtG9l5QK1FGzgw31z2:/WLeSSDq0vyeZ/T0jtGD5QK1Qk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0864fdc2ad33b2b2b0228a4eaff187d4a8b7cf80ceaa4c9d6039357f8288a38.exe
Files
-
f0864fdc2ad33b2b2b0228a4eaff187d4a8b7cf80ceaa4c9d6039357f8288a38.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxdkunpl Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
waolgdfv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE