Static task
static1
Behavioral task
behavioral1
Sample
b251843550c238bfd204de78d7d084ff737936ebd19fa983ef4c34930e792914.exe
Resource
win7-20240708-en
General
-
Target
b251843550c238bfd204de78d7d084ff737936ebd19fa983ef4c34930e792914
-
Size
1.8MB
-
MD5
92d3c45f84e7e4f066537f114f0ec480
-
SHA1
4c767623da31a358421170fdcad8f7cfd506cb9f
-
SHA256
b251843550c238bfd204de78d7d084ff737936ebd19fa983ef4c34930e792914
-
SHA512
4f1fcd326967f1dc5aef9e376cbf406aa350aca491df0ea9d5118b5fd82d4fb8299b3122db16e8919f02ccf93b8f1a6c9238be814488db71cca30bdfbcf5a1f3
-
SSDEEP
49152:sf8DchNGx8v8+2r4wa2PCoBEy+Tw++qdoACG+9z5Is:sWchNGxE2rbnPCoCn+qdoAC79I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b251843550c238bfd204de78d7d084ff737936ebd19fa983ef4c34930e792914
Files
-
b251843550c238bfd204de78d7d084ff737936ebd19fa983ef4c34930e792914.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 161KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qbdtwtqn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xbsnosmj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE