Static task
static1
Behavioral task
behavioral1
Sample
712ec9572dfa13d34b8e396248419e30ae065da91c9da604fd9a13c142dbc5d9.exe
Resource
win7-20240903-en
General
-
Target
712ec9572dfa13d34b8e396248419e30ae065da91c9da604fd9a13c142dbc5d9.exe
-
Size
1.7MB
-
MD5
3b59181d5c523a0ed0bfded3a2bac6d1
-
SHA1
c863b1e6e130e876a4eb98cc4e646a98dc16d03d
-
SHA256
712ec9572dfa13d34b8e396248419e30ae065da91c9da604fd9a13c142dbc5d9
-
SHA512
37abc97b838dfb8585c7c5d63c392e2914d2f476a6b282e5c09add4af1f1857b9ec3ad9451a7041b23c572ea82f88054d78b2965a66469e2958a36dfc46831d7
-
SSDEEP
24576:yO4pr/GAiO+YQp4wLMdMNxsyFDuh3aqUYJXLc1xAyURNmXmVeqFluiCrdrf1swJs:LI9iBYQjQyF6h3tP2aZ0mV5EiC9Dxy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 712ec9572dfa13d34b8e396248419e30ae065da91c9da604fd9a13c142dbc5d9.exe
Files
-
712ec9572dfa13d34b8e396248419e30ae065da91c9da604fd9a13c142dbc5d9.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upkdpaqj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vqvclncq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE