Static task
static1
Behavioral task
behavioral1
Sample
39f1233582871e88165f5db5f7a53fa5532a801258b2c1ff65eb1adb8a0cd267.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39f1233582871e88165f5db5f7a53fa5532a801258b2c1ff65eb1adb8a0cd267.exe
Resource
win10v2004-20241007-en
General
-
Target
39f1233582871e88165f5db5f7a53fa5532a801258b2c1ff65eb1adb8a0cd267
-
Size
1.7MB
-
MD5
a66a2a935d8c962de51782747aca83af
-
SHA1
f39009890a885dbe3cce3a488ff9f909c040f6cc
-
SHA256
39f1233582871e88165f5db5f7a53fa5532a801258b2c1ff65eb1adb8a0cd267
-
SHA512
b360e42f0f85c2988ec1c0216ee855467f78500e878e0f035eb6317e0d870c3ac315e9438f6ee487e4bf743dd673959bb663a20cba69e04a398aad4d5658044b
-
SSDEEP
49152:iGKQT8suM9FB0Lw1xPSuxOF2Ojl16iE+Q9LnhepsCGv8b:iGngCuw1susF7jv6TPLhCw8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39f1233582871e88165f5db5f7a53fa5532a801258b2c1ff65eb1adb8a0cd267
Files
-
39f1233582871e88165f5db5f7a53fa5532a801258b2c1ff65eb1adb8a0cd267.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vlnnpxku Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdbvcuxc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE