Static task
static1
Behavioral task
behavioral1
Sample
9fcaaf99e6ee1f9aa296de5b3bd927a85d2d806a5fd335610f43842084ad7bce.exe
Resource
win7-20240903-en
General
-
Target
9fcaaf99e6ee1f9aa296de5b3bd927a85d2d806a5fd335610f43842084ad7bce
-
Size
1.8MB
-
MD5
bdc71574241e60a51ac793c66ba34c3d
-
SHA1
c6ae9dbde6201fc4c11c3200222f88a8dc808cbb
-
SHA256
9fcaaf99e6ee1f9aa296de5b3bd927a85d2d806a5fd335610f43842084ad7bce
-
SHA512
2ddaee141e719df99fcbdd456840c2c1022340a00ddf71bbc73171c287b9267e8c0aa6321d0f9dcc1c4d254cbb20ab47a5feb2ef8411c72b177dca21a4122569
-
SSDEEP
49152:1clfp7k+DTrVD6gBOjQ9qVjFMlM2s/kDZizU0yJeAHB3r:M7kkrVD6Zwq92sEZiI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fcaaf99e6ee1f9aa296de5b3bd927a85d2d806a5fd335610f43842084ad7bce
Files
-
9fcaaf99e6ee1f9aa296de5b3bd927a85d2d806a5fd335610f43842084ad7bce.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 152KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kcrairml Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ldrvklym Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE