Static task
static1
Behavioral task
behavioral1
Sample
b4d593afebeb7f39861fe5c5c9b9e581713548ab083891da3c9c7303fc5b8356.exe
Resource
win7-20241023-en
General
-
Target
b4d593afebeb7f39861fe5c5c9b9e581713548ab083891da3c9c7303fc5b8356
-
Size
1.8MB
-
MD5
67a1db36f1100ba1f91d2c8fcfe492e1
-
SHA1
c90ac39431a80979f5b5152d91dd8648e4e4f250
-
SHA256
b4d593afebeb7f39861fe5c5c9b9e581713548ab083891da3c9c7303fc5b8356
-
SHA512
68560d69c67bbf0166b6ddf626038a221fc7aed7a3c852904d2092f2f8b931b325caa909a18d5286567faa57c7a86066410f2daeb97156e816f0c37350e76003
-
SSDEEP
49152:luP+Ugmd/aDt+QfD6S0OhYqGuHh6pfcaWF:Cgmd/cVfD6S0yYqGMUpfE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4d593afebeb7f39861fe5c5c9b9e581713548ab083891da3c9c7303fc5b8356
Files
-
b4d593afebeb7f39861fe5c5c9b9e581713548ab083891da3c9c7303fc5b8356.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qhavrsax Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xrcvxayy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE