Static task
static1
Behavioral task
behavioral1
Sample
cb7977ef062275dbb405450080fb7aa7ddb1c03e07c0747fe8d3fe3249453ec8N.exe
Resource
win7-20240903-en
General
-
Target
cb7977ef062275dbb405450080fb7aa7ddb1c03e07c0747fe8d3fe3249453ec8N
-
Size
1.8MB
-
MD5
dd5768f3daef5ccf31d4461161134820
-
SHA1
c285bf4807eec07ff0f425d876cdf22e49585f2e
-
SHA256
cb7977ef062275dbb405450080fb7aa7ddb1c03e07c0747fe8d3fe3249453ec8
-
SHA512
8ef2a0d473272850d3221a04a4d475afde0c29b66244e23bdab171b85c347fadcd6737b6ead8448271b8898d0f7945ec45cc15b026549e3ec9121b9d5465eb33
-
SSDEEP
49152:Qe3qR4a2sBrvzd17bE4MeDNMg3i7VISXRIB1R+t:QeMpT7lN0NyR+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb7977ef062275dbb405450080fb7aa7ddb1c03e07c0747fe8d3fe3249453ec8N
Files
-
cb7977ef062275dbb405450080fb7aa7ddb1c03e07c0747fe8d3fe3249453ec8N.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ocsuuicc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zeotpovc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE