Static task
static1
Behavioral task
behavioral1
Sample
4dda99439b1a29a9bc4732918ddcbeaf05d23972f3fb31984b1b31cac19260be.exe
Resource
win7-20240903-en
General
-
Target
4dda99439b1a29a9bc4732918ddcbeaf05d23972f3fb31984b1b31cac19260be
-
Size
2.8MB
-
MD5
716628fb0fdb94b6038ba082cc6f9386
-
SHA1
9c6f7fb1d8b84505cc76b9fe395da8586c85a71f
-
SHA256
4dda99439b1a29a9bc4732918ddcbeaf05d23972f3fb31984b1b31cac19260be
-
SHA512
4c1a0ffa9665bed763be4bec68006e900a84e40719942d3de8c3378dabcb0df377ee628643fe370fcaca24854c50bc055ecf1ab357098c20f020877285d28153
-
SSDEEP
49152:nRKbgKDEEUZ7N9OWI9vxpjLsR3aC+ApTkN7Mha2:nRKbgKDEEU5bOWIVPjLsh/u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dda99439b1a29a9bc4732918ddcbeaf05d23972f3fb31984b1b31cac19260be
Files
-
4dda99439b1a29a9bc4732918ddcbeaf05d23972f3fb31984b1b31cac19260be.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ciuhuowg Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ciucaxxl Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE