Static task
static1
Behavioral task
behavioral1
Sample
335b9c173dcf00e1b0612753cf4e021578690c9ab16f98e1d00da18eed7aa687.exe
Resource
win7-20240903-en
General
-
Target
335b9c173dcf00e1b0612753cf4e021578690c9ab16f98e1d00da18eed7aa687
-
Size
3.2MB
-
MD5
5c79e9130fe7a65573f8749b84020166
-
SHA1
46406c4e5ba432fe7c11321ca2ce72f242bdc2b7
-
SHA256
335b9c173dcf00e1b0612753cf4e021578690c9ab16f98e1d00da18eed7aa687
-
SHA512
27aebe6ec716ee75657a64eb1c763f14ff51521d59eb576216e6e2fcd229ac0a7526ef1c0da8cdcb75deb557dfd26d229d7022386f3c8a225ff355aab789408b
-
SSDEEP
49152:GAMG5Xq7aVGsqaIY2ZHc82I+fEz4JqGXkdDWCrud3vOLRE1:nfXq7aHCY6HB2I+ffJvXktWCruR4R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 335b9c173dcf00e1b0612753cf4e021578690c9ab16f98e1d00da18eed7aa687
Files
-
335b9c173dcf00e1b0612753cf4e021578690c9ab16f98e1d00da18eed7aa687.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jovnsvwg Size: 2.7MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
knugjkzu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE