Static task
static1
Behavioral task
behavioral1
Sample
dc2f3a48245d95e5a6ac07eddcdc978ee5c78ed2d51ccb8432b90df5db13e003.exe
Resource
win7-20240903-en
General
-
Target
dc2f3a48245d95e5a6ac07eddcdc978ee5c78ed2d51ccb8432b90df5db13e003
-
Size
1.8MB
-
MD5
a981417190c316076ae69826e4913f71
-
SHA1
121e83193213144ee0cbe5e35477f520de7e7b0a
-
SHA256
dc2f3a48245d95e5a6ac07eddcdc978ee5c78ed2d51ccb8432b90df5db13e003
-
SHA512
6ebaab84ac8c5ce46571940fb6ec147490cc36cdc0aa46b5584a5c27247422f2dbef66be9439362013af54c7e3a8d7bbed10ec20570116257fff6064edf6c894
-
SSDEEP
49152:YETgGsBv+/EQ+JVy+rMA2ypcrgE07HgdC:b8nven+JwZypmD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc2f3a48245d95e5a6ac07eddcdc978ee5c78ed2d51ccb8432b90df5db13e003
Files
-
dc2f3a48245d95e5a6ac07eddcdc978ee5c78ed2d51ccb8432b90df5db13e003.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adbrnklm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zxrwvhyf Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE