Static task
static1
Behavioral task
behavioral1
Sample
0ae2c8acbddc48dd97f16512c7f8e00442411f9e3fdca1253d2a20d480030857.exe
Resource
win7-20241010-en
General
-
Target
0ae2c8acbddc48dd97f16512c7f8e00442411f9e3fdca1253d2a20d480030857
-
Size
1.8MB
-
MD5
71daba5a5cac27f1ba8b68a2b73f8ecd
-
SHA1
25673a28eb575db5644158f630f679f33c51908b
-
SHA256
0ae2c8acbddc48dd97f16512c7f8e00442411f9e3fdca1253d2a20d480030857
-
SHA512
9965a705a6c6fadd432d86a4e4b387e93a0ddc2517372143f77051e65c046d246719c59919f787b297eeb5918f4ffa7afb0e7ebdb41f1d2b68d9aa74804da82a
-
SSDEEP
49152:5faLYI++gAFsG+pvgCVprZYuE6DGjo7EvxAx:VTwJsG+tTZlDJoSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae2c8acbddc48dd97f16512c7f8e00442411f9e3fdca1253d2a20d480030857
Files
-
0ae2c8acbddc48dd97f16512c7f8e00442411f9e3fdca1253d2a20d480030857.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jkvktxph Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
haucnjnx Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE