Static task
static1
Behavioral task
behavioral1
Sample
507d6beb28401d2fbe5f72313c25bde0e47d268bb88362866c63af42b8d2e863.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
507d6beb28401d2fbe5f72313c25bde0e47d268bb88362866c63af42b8d2e863.exe
Resource
win10v2004-20241007-en
General
-
Target
507d6beb28401d2fbe5f72313c25bde0e47d268bb88362866c63af42b8d2e863
-
Size
1.7MB
-
MD5
be29ae42a9079e7e1f78ca2cc117ec36
-
SHA1
cf3453b463de1e2904eb6468edad9a30d222243b
-
SHA256
507d6beb28401d2fbe5f72313c25bde0e47d268bb88362866c63af42b8d2e863
-
SHA512
55c0ecf0eab265757ebf9147572e0b43dec76005da27cec81b0d58abd3f98f2d42b9821f928313f22683fc4b36eac3848495cc477f4faf5656597ceb1567cc7c
-
SSDEEP
24576:aHY3/O/L3/4tvPfWsM8Ra3SSohrlV7tp9MVNZAHVGZUGGi35phJxRLl0pE8tacRY:qCkL3qvPBMN3qplDp6Vn/ZMOzuigqIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 507d6beb28401d2fbe5f72313c25bde0e47d268bb88362866c63af42b8d2e863
Files
-
507d6beb28401d2fbe5f72313c25bde0e47d268bb88362866c63af42b8d2e863.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
klnnleal Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hgmdrdjn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE