Static task
static1
Behavioral task
behavioral1
Sample
0f7dd29f0e9b2104445dee2ac82bf813558eb37ff2f9e55d5a991d48968afabd.exe
Resource
win7-20240903-en
General
-
Target
0f7dd29f0e9b2104445dee2ac82bf813558eb37ff2f9e55d5a991d48968afabd
-
Size
1.8MB
-
MD5
5864d8f9756f2513852312de406734c9
-
SHA1
6f94ec4ffbb60d1d02dc486f6849d9d2e77077fe
-
SHA256
0f7dd29f0e9b2104445dee2ac82bf813558eb37ff2f9e55d5a991d48968afabd
-
SHA512
d03b4e45c640d74fc4f6080f3c32932603b2eb5b20ad9756f515fb60b529b6c9f6abe047bd17bff855445fd3cf57f32630ef2adcd74dde5516009434fc106eef
-
SSDEEP
49152:fxLTw/8DbdyKsTTJ+geTiyWKY6gAfZUaau:fV0/8DpyFTQ2qdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f7dd29f0e9b2104445dee2ac82bf813558eb37ff2f9e55d5a991d48968afabd
Files
-
0f7dd29f0e9b2104445dee2ac82bf813558eb37ff2f9e55d5a991d48968afabd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zsgdjcbm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oladfldl Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE