Static task
static1
Behavioral task
behavioral1
Sample
81c56ebb5ce329cbde207a7bc43e71d90375ec932fd292436341ae212cfda275.exe
Resource
win7-20240903-en
General
-
Target
81c56ebb5ce329cbde207a7bc43e71d90375ec932fd292436341ae212cfda275
-
Size
1.8MB
-
MD5
fc2c2bf84a859d674e3d0c4844ad4e70
-
SHA1
ad3068dbf9bcfa9672e353acd9ef916d9b6e7e45
-
SHA256
81c56ebb5ce329cbde207a7bc43e71d90375ec932fd292436341ae212cfda275
-
SHA512
091d2a6b24715af3bee4e2f5970b77ec63ec6fc886d7d513ca059d61e764ca82448ae6e9606f919da9c1ab240b984b5c20df73296158281b0efa1bdade5e334c
-
SSDEEP
49152:fQkuSJnhtNj8vTCBKt5fHOcizQ9kHtb2Bf1e5vE:4W1NAYKaQCHtb2VY+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81c56ebb5ce329cbde207a7bc43e71d90375ec932fd292436341ae212cfda275
Files
-
81c56ebb5ce329cbde207a7bc43e71d90375ec932fd292436341ae212cfda275.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 147KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rttyltwp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wfmeovfq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE