Static task
static1
Behavioral task
behavioral1
Sample
b95f42c66f6989263792fb1915222b495e7e55386de625d0b4671de6767a08e8.exe
Resource
win7-20240903-en
General
-
Target
b95f42c66f6989263792fb1915222b495e7e55386de625d0b4671de6767a08e8.exe
-
Size
2.4MB
-
MD5
2f93a73b9f790ee7d672caa33c527d78
-
SHA1
9a3f71ea06cd9819f82c3d4dbb271986975c7845
-
SHA256
b95f42c66f6989263792fb1915222b495e7e55386de625d0b4671de6767a08e8
-
SHA512
a14b924cd8ca31b0cb48c4f8465e04458197d6a934c0d08742f96e842c5f3924c8eba192f68b6c550c221f8aea8e1aab351252e1348b26022e4b8ce3e9e12d70
-
SSDEEP
49152:7NHBYCfHLr3AZAUouIho0rDCEJNOy3ZbtOEeKD58Gy8ra52vk:7hhDUZ9ozLHJ0gtbD508rbvk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b95f42c66f6989263792fb1915222b495e7e55386de625d0b4671de6767a08e8.exe
Files
-
b95f42c66f6989263792fb1915222b495e7e55386de625d0b4671de6767a08e8.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 916KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zlbdfirq Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avadwaaj Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE