Static task
static1
Behavioral task
behavioral1
Sample
9e1d4ef4049d83ab6f1a451fd16dc1843d3b162a8024e0193d39ce38b4970c0d.exe
Resource
win7-20240729-en
General
-
Target
9e1d4ef4049d83ab6f1a451fd16dc1843d3b162a8024e0193d39ce38b4970c0d.exe
-
Size
1.8MB
-
MD5
8a80c9665c83258db45ee674d764a219
-
SHA1
0c68894b4c39bc049e95e640c81c044ee8ad6df2
-
SHA256
9e1d4ef4049d83ab6f1a451fd16dc1843d3b162a8024e0193d39ce38b4970c0d
-
SHA512
cf2db9c4678f3f681e2a25bf9978277540ef3b05feb07bdd5c1d0bca5e51c49790096217383da495a31dd12407a3b377c03a03d022e4e87cd5d992dd0e67852d
-
SSDEEP
49152:dGbpaBIua5mOjJACFHA2sRgHmU+ZXBVsmBbGE:4xTokACVsTemgE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e1d4ef4049d83ab6f1a451fd16dc1843d3b162a8024e0193d39ce38b4970c0d.exe
Files
-
9e1d4ef4049d83ab6f1a451fd16dc1843d3b162a8024e0193d39ce38b4970c0d.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 161KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ytamlnzd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ltsipvzi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE