Static task
static1
Behavioral task
behavioral1
Sample
39186e59233102f510395c4da3281fe5cc897f69903bafa8e10d4f491c945d1d.exe
Resource
win7-20240903-en
General
-
Target
39186e59233102f510395c4da3281fe5cc897f69903bafa8e10d4f491c945d1d
-
Size
1.8MB
-
MD5
028eb861b66532362b3ae1930f380226
-
SHA1
a9c22733ac8b3f654843bed923fdcf6230baf3bb
-
SHA256
39186e59233102f510395c4da3281fe5cc897f69903bafa8e10d4f491c945d1d
-
SHA512
e9c0814f80a1da8cc9dcae37786c6db48d8f5ad27f6f2215471e3a8e2503cfae0984068638d134711c2fcb0cb4d5f8a9bbec9021af1b9cb7351e9fc7dcc2e4b0
-
SSDEEP
49152:h0ejLbMzgnsYcRs4zmMjGGap7NL4N8SRWVSiz:hvPbMcwNmSGGapxL88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39186e59233102f510395c4da3281fe5cc897f69903bafa8e10d4f491c945d1d
Files
-
39186e59233102f510395c4da3281fe5cc897f69903bafa8e10d4f491c945d1d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ywqszrse Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
spraxkho Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE