Static task
static1
Behavioral task
behavioral1
Sample
53036028d463806b42004f8af8b6773b1b5ce779e66367a6e3963674676fe382.exe
Resource
win7-20240903-en
General
-
Target
53036028d463806b42004f8af8b6773b1b5ce779e66367a6e3963674676fe382
-
Size
2.7MB
-
MD5
7443bb38e90dae43396dd59b203154c2
-
SHA1
c0e7e78ec238500f9f42d7c1826d3a3a89bd4bbd
-
SHA256
53036028d463806b42004f8af8b6773b1b5ce779e66367a6e3963674676fe382
-
SHA512
3fb08eb7f82a0880102496f4bbd46f9a766046b51484e3ddc1a780884827dcabc5fdd06f8def73512788f300bcc5e671e94be8bf47357771fb2482543812c502
-
SSDEEP
49152:LtdWeIgDA0JdJYGEJ3jHoJ75NfNLh+jez+jMYG9:LtQx+A0JbYG632N2jKgMh9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53036028d463806b42004f8af8b6773b1b5ce779e66367a6e3963674676fe382
Files
-
53036028d463806b42004f8af8b6773b1b5ce779e66367a6e3963674676fe382.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
malopcck Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mqaeucmb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE