Static task
static1
Behavioral task
behavioral1
Sample
d626737a33a9d44f82f1e27a1b977ddb0cbc29019f7de000aac2dce1fe085440.exe
Resource
win7-20240903-en
General
-
Target
d626737a33a9d44f82f1e27a1b977ddb0cbc29019f7de000aac2dce1fe085440
-
Size
2.8MB
-
MD5
20de5611a82d6bbff3cd044f5fb59ccc
-
SHA1
1c1f6cd50b6c5ba1c867dd0df8726c894d447da5
-
SHA256
d626737a33a9d44f82f1e27a1b977ddb0cbc29019f7de000aac2dce1fe085440
-
SHA512
3e30b780e84df976106072202a08cfc4ce2bcb19ddf883bf0b16cce8e75702fbbeb8836168ed5df8668ec72046baf382ce2c66aa89d2c7d8f993ae81b1b7dea0
-
SSDEEP
49152:iiXdeV888hu8N4FnLb+MEkIBKe92G9ZQLm9d3Jy0azN:iip0LKMEkIHHQLKdZTaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d626737a33a9d44f82f1e27a1b977ddb0cbc29019f7de000aac2dce1fe085440
Files
-
d626737a33a9d44f82f1e27a1b977ddb0cbc29019f7de000aac2dce1fe085440.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zfstvoni Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ficfgupi Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE