Static task
static1
Behavioral task
behavioral1
Sample
0848f9e083714bd862e602308b0d7551649e7367d4fae8d0019bd1e714d366d8.exe
Resource
win7-20241023-en
General
-
Target
0848f9e083714bd862e602308b0d7551649e7367d4fae8d0019bd1e714d366d8
-
Size
1.7MB
-
MD5
9cf3d98d30cb22749784495a24fb1797
-
SHA1
d287ffb0fbd11642c44d62e93d0b0fa6bc3ee191
-
SHA256
0848f9e083714bd862e602308b0d7551649e7367d4fae8d0019bd1e714d366d8
-
SHA512
df6055357be9612a0fa48c42f2d5e00ed7881d685225e7c50caf4efae7f1dee3865af539fb8b3119ee25a203b15826031e8320930e47299e069e133ff1b62cb0
-
SSDEEP
49152:JvuZKCUUR1q3nkNXWQ2E+/RiO5oLcJAr5Yg:JmZKCrwADV+pjoWw7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0848f9e083714bd862e602308b0d7551649e7367d4fae8d0019bd1e714d366d8
Files
-
0848f9e083714bd862e602308b0d7551649e7367d4fae8d0019bd1e714d366d8.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kdzcuzko Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
disjtuau Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE