Static task
static1
Behavioral task
behavioral1
Sample
f13895a9f499d1c2783747f6f5c96ac690ff2423b1496cc86b6912c67a7cafd9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f13895a9f499d1c2783747f6f5c96ac690ff2423b1496cc86b6912c67a7cafd9.exe
Resource
win10v2004-20241007-en
General
-
Target
f13895a9f499d1c2783747f6f5c96ac690ff2423b1496cc86b6912c67a7cafd9
-
Size
1.7MB
-
MD5
07f4024a9ce4fa36d2ee6907ec0e827c
-
SHA1
772203f6cbf91f48e318d2b398b61e88b81a75c0
-
SHA256
f13895a9f499d1c2783747f6f5c96ac690ff2423b1496cc86b6912c67a7cafd9
-
SHA512
82e863a69f59c94137a43c2584f6b800430e0264fd293a05ab43eca4cdabc5b8ad29464dd5ca93282ff25cd17c90ee6188c63f2e9f378b72426970713d5f97c4
-
SSDEEP
24576:ryEq0KD5TRjAY46tFYBmY8GrqA1095RbqNlf9PdnDy60AwVzRoSh5FmBzE1rr6lg:lKD5TKwtF9A1095RGl7zwPcBwWl0Uye
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f13895a9f499d1c2783747f6f5c96ac690ff2423b1496cc86b6912c67a7cafd9
Files
-
f13895a9f499d1c2783747f6f5c96ac690ff2423b1496cc86b6912c67a7cafd9.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vihsyhfu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sugwiaax Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE