Static task
static1
Behavioral task
behavioral1
Sample
7883a75320d53f5561b3e9a8c2fbe525413ceef47ff435e7834d62a9ffde14ad.exe
Resource
win7-20240708-en
General
-
Target
7883a75320d53f5561b3e9a8c2fbe525413ceef47ff435e7834d62a9ffde14ad
-
Size
1.8MB
-
MD5
644d55ea767b2ec3937c9b41ef6ab624
-
SHA1
4f144da2f65c259b3a663369f55063feebae9c28
-
SHA256
7883a75320d53f5561b3e9a8c2fbe525413ceef47ff435e7834d62a9ffde14ad
-
SHA512
bd24f804462875bc3a7c78e07248f5f1eea4e0649e21ba8858622bcdf00229a85c7457b8ffd87e671677f3727cbb641d936e87a70f8ed052c5a2299108c401c9
-
SSDEEP
49152:T7dybQKjESJDHCgpaZR16X8BEXmMS4xppIvTUVwmX:nvkBJOc4AMBlMS4xkbUO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7883a75320d53f5561b3e9a8c2fbe525413ceef47ff435e7834d62a9ffde14ad
Files
-
7883a75320d53f5561b3e9a8c2fbe525413ceef47ff435e7834d62a9ffde14ad.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mgykjyfk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dtqgfwio Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE