Static task
static1
Behavioral task
behavioral1
Sample
421d517434410dae2f314b59dd4fc3cd474f927ac1aec8251e0cf7443b0cec07.exe
Resource
win7-20240903-en
General
-
Target
421d517434410dae2f314b59dd4fc3cd474f927ac1aec8251e0cf7443b0cec07
-
Size
3.1MB
-
MD5
1c62672c5209a4053ba6f8ab89024d50
-
SHA1
15f35f53b47ccc77950b4435edeb4ef83ddd2a6c
-
SHA256
421d517434410dae2f314b59dd4fc3cd474f927ac1aec8251e0cf7443b0cec07
-
SHA512
1e7d513d703121c4c48ccd6a2bfa664f1824432384b0d0f8a53a70b60e58c50f9e621afc2d89f1390f79bd26f85a15e8ab4ec5bac876ee690a31440fd499686b
-
SSDEEP
49152:5nIbQUGcL9rhRv3EpjFw1lsZkthw4b1HH45batHS:5n/cL9rhh3Eppasqthw4bNty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 421d517434410dae2f314b59dd4fc3cd474f927ac1aec8251e0cf7443b0cec07
Files
-
421d517434410dae2f314b59dd4fc3cd474f927ac1aec8251e0cf7443b0cec07.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ylhgebgk Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmvkdefy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE