Static task
static1
Behavioral task
behavioral1
Sample
284af7a36d9455e68802400e9aea770501468f873a42ea49c2485cbcae75fec1.exe
Resource
win7-20240708-en
General
-
Target
284af7a36d9455e68802400e9aea770501468f873a42ea49c2485cbcae75fec1.exe
-
Size
1.8MB
-
MD5
666e9ffe15e2da4d89d8fbdd95a66e63
-
SHA1
587552d1a5d03902dd29a733a796bfadcf6adc16
-
SHA256
284af7a36d9455e68802400e9aea770501468f873a42ea49c2485cbcae75fec1
-
SHA512
f711679deb54e0bc7ce12e350cead5bedb0934e8677f80e40ca91182ee16e5de6a29dac4f0cd6808f70b88ad644df66da80bd14007a4bdebadace4277d120b25
-
SSDEEP
49152:Ctx9UE8Ddg7lEHXzfydgBN6J61zmuB/qULfPRgZwst/P:y+D27i3zfy3UZTfPRYdP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 284af7a36d9455e68802400e9aea770501468f873a42ea49c2485cbcae75fec1.exe
Files
-
284af7a36d9455e68802400e9aea770501468f873a42ea49c2485cbcae75fec1.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
siuylstv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cjnknbeh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE