Static task
static1
Behavioral task
behavioral1
Sample
982db275252a59d3493b7a70ca209fb2d8c96df7aadf5c139c218ee1cd9d1790.exe
Resource
win7-20241023-en
General
-
Target
982db275252a59d3493b7a70ca209fb2d8c96df7aadf5c139c218ee1cd9d1790
-
Size
1.7MB
-
MD5
3e6d9df8a6c39057d6db22bc03e910e8
-
SHA1
b007369b28665b1f00169fd3e2a0dcc63f3b7859
-
SHA256
982db275252a59d3493b7a70ca209fb2d8c96df7aadf5c139c218ee1cd9d1790
-
SHA512
13d5692aeb56304f09c4ee1d5047b756d93b701251aa1c1d662580d9420ff866bdd740d4377859bf59ece5933b9161da70d80bbc8ab9912d3354e66dd1d782be
-
SSDEEP
49152:Um2Z/mJ5bYF0w5fiJwKtQvN4GD7EvwvWEzGuHmqIDIgnRQkVJ:UxVmyrfiO9N4u7EvrEzGQIDIeZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 982db275252a59d3493b7a70ca209fb2d8c96df7aadf5c139c218ee1cd9d1790
Files
-
982db275252a59d3493b7a70ca209fb2d8c96df7aadf5c139c218ee1cd9d1790.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qodbihav Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ktddlncg Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE