Static task
static1
Behavioral task
behavioral1
Sample
f3728fd1a4f584d4fe5de4cbc70aafe0d14a9ddfd9ae6a714c6a05956c687963.exe
Resource
win7-20240903-en
General
-
Target
f3728fd1a4f584d4fe5de4cbc70aafe0d14a9ddfd9ae6a714c6a05956c687963
-
Size
1.8MB
-
MD5
50440a504184bdcba50641629d4c9ac6
-
SHA1
5642f04832aaa6569858c429e0b0825a38b66f3b
-
SHA256
f3728fd1a4f584d4fe5de4cbc70aafe0d14a9ddfd9ae6a714c6a05956c687963
-
SHA512
6cd77477730ad8386958585315fad001177ff23241700decefda2094843f81f335dcf6e9c331505e18b1662873c40f16ad0224fd5a824b451be0ea8a2c103244
-
SSDEEP
49152:FaQ3W19xVcZiJ2HDJ5WP54SdGFKRW1fKSF0oaeLaJ:FaQ3WjxVcgKJQh4tFoW1fKSWl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3728fd1a4f584d4fe5de4cbc70aafe0d14a9ddfd9ae6a714c6a05956c687963
Files
-
f3728fd1a4f584d4fe5de4cbc70aafe0d14a9ddfd9ae6a714c6a05956c687963.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 147KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ymyfdtro Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nlbxgwyu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE