Static task
static1
Behavioral task
behavioral1
Sample
02a954a7b2e594a3d48f654fe40ff0f2b6e10f5a96098cff52d57235a74afd8e.exe
Resource
win7-20240903-en
General
-
Target
02a954a7b2e594a3d48f654fe40ff0f2b6e10f5a96098cff52d57235a74afd8e
-
Size
1.7MB
-
MD5
ea8ae3d8d7c7f38856e114110edd8700
-
SHA1
6726c6f243d2a2fa514e62bd888d2c4fd566ccfe
-
SHA256
02a954a7b2e594a3d48f654fe40ff0f2b6e10f5a96098cff52d57235a74afd8e
-
SHA512
64f08d13ed762c77f1388814855375357f6d769d10be91af0c84b885fdcf63405854c475f73d02d973c7ea099aff24a668430573aa974d5c8dd7cafb4cc19754
-
SSDEEP
49152:wkOe6edon40Lm8ltIeXg7D773dCNaJJr:woZotyNe+JJr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a954a7b2e594a3d48f654fe40ff0f2b6e10f5a96098cff52d57235a74afd8e
Files
-
02a954a7b2e594a3d48f654fe40ff0f2b6e10f5a96098cff52d57235a74afd8e.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yqvfuxet Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ugimducm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE