Static task
static1
Behavioral task
behavioral1
Sample
509d3e059b07679346b1b9c9309552b9e84a305b3092e08f9e6335037aadc9ae.exe
Resource
win7-20240903-en
General
-
Target
509d3e059b07679346b1b9c9309552b9e84a305b3092e08f9e6335037aadc9ae
-
Size
2.7MB
-
MD5
c3d8a4a611c34b4a0c282bfdb307c71a
-
SHA1
f19be89f63ce88465b65ec7df00640d8b0715379
-
SHA256
509d3e059b07679346b1b9c9309552b9e84a305b3092e08f9e6335037aadc9ae
-
SHA512
178469dea7d9e9ed4ce054e8e6420cb63ee774c317d13e82d3e475e008e53641689cd1a490294833d03865caec4e64281aa1706128c559293f3738908b7cba72
-
SSDEEP
49152:Ybmns9E0EtFJiSZFU6ofHiYYhN5sU5ydQ18cX/vmlQK:cOsO0EtFJiSZy6ofHiYYh/V5y+2cX/vy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 509d3e059b07679346b1b9c9309552b9e84a305b3092e08f9e6335037aadc9ae
Files
-
509d3e059b07679346b1b9c9309552b9e84a305b3092e08f9e6335037aadc9ae.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kfpzraif Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jkhykxgb Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE