Static task
static1
Behavioral task
behavioral1
Sample
61190c99bafae4a9cf90bac8d5b6658438fb838526b13a5a61283c550f849658.exe
Resource
win7-20240903-en
General
-
Target
61190c99bafae4a9cf90bac8d5b6658438fb838526b13a5a61283c550f849658
-
Size
2.8MB
-
MD5
3e118a7f3395ee4d0d4ca131ca3847bb
-
SHA1
91616b7d42259a58b2766306dddb53b4910b23b0
-
SHA256
61190c99bafae4a9cf90bac8d5b6658438fb838526b13a5a61283c550f849658
-
SHA512
ee3718a6e2199903147e05dd2ac2e844843310c59a46d1c96fd0443effd32ff562dc589cd42a05fa13120ad9c60a9de62ff02c243096e2970dc3f349cdef5de4
-
SSDEEP
49152:Fs9t+v6ZgxSYOJsjWascaznymrLXCkufpZCVE0rrucnTBMCJ:Fs9c6g0YOJCWtc8nyhkwZgycnTBM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61190c99bafae4a9cf90bac8d5b6658438fb838526b13a5a61283c550f849658
Files
-
61190c99bafae4a9cf90bac8d5b6658438fb838526b13a5a61283c550f849658.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
drmmbjfe Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ukkuhbav Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE