Static task
static1
Behavioral task
behavioral1
Sample
615739515e50ebb3375034f3116aaec9075754873d835910adfc56bdb66a7733.exe
Resource
win7-20241010-en
General
-
Target
615739515e50ebb3375034f3116aaec9075754873d835910adfc56bdb66a7733
-
Size
2.8MB
-
MD5
c6290b9ed32a91607cd47002a7455bc7
-
SHA1
b9e8753a3f16239320eaa78968561f34832918ee
-
SHA256
615739515e50ebb3375034f3116aaec9075754873d835910adfc56bdb66a7733
-
SHA512
b7ce4f23067f7c98566473591d5c547e214e00b0df2ebb360425326d04fcd744ae3b0984679c6b1825a16e57f02901b74dce2a81e9ff5d9b226bda1f76cda7cd
-
SSDEEP
49152:dc05s+hHp6wuSg7Dw2lJow+0SB0jEF/9nbMS4n:qAs8Hp6wuSg7Dw2Xovqj+/NbM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 615739515e50ebb3375034f3116aaec9075754873d835910adfc56bdb66a7733
Files
-
615739515e50ebb3375034f3116aaec9075754873d835910adfc56bdb66a7733.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fofpvoiv Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xcxwpxvs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE