Static task
static1
Behavioral task
behavioral1
Sample
e91d25c3211c91505b13081bb8bbd3b00bba238f6fadb36c7150911071684d9c.exe
Resource
win7-20240903-en
General
-
Target
e91d25c3211c91505b13081bb8bbd3b00bba238f6fadb36c7150911071684d9c
-
Size
1.8MB
-
MD5
83eb724f34d7d9792ce881cadab094e8
-
SHA1
a4f72e89587d86f5d6e7f747eaf1bd75702c09f4
-
SHA256
e91d25c3211c91505b13081bb8bbd3b00bba238f6fadb36c7150911071684d9c
-
SHA512
d0b5b2e8b29346a7ccf6780c7ede516ae36d2cdf771f6e7e440b99988cccf68455a09212f444926f6d78da455dbc1a29a6bcecd2dd469a5d898609a063a05c01
-
SSDEEP
49152:DNByELjLU6maRBJ8weUgU4QMG3cCD0fsL2Bj:BDjQ6pJjTL4QMG3cCWsiBj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e91d25c3211c91505b13081bb8bbd3b00bba238f6fadb36c7150911071684d9c
Files
-
e91d25c3211c91505b13081bb8bbd3b00bba238f6fadb36c7150911071684d9c.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fcdwmdiv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lifmwmte Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE