Static task
static1
Behavioral task
behavioral1
Sample
f7756dff900abe35a5d0c0936598f8d4.exe
Resource
win7-20240729-en
General
-
Target
f7756dff900abe35a5d0c0936598f8d4.exe
-
Size
2.6MB
-
MD5
f7756dff900abe35a5d0c0936598f8d4
-
SHA1
501d49c3a442f5aabdcd5f7a26c6e6b1d34ae39a
-
SHA256
a103d36f8aee2b131b1c008ce390b243c8860fe9e09c6f312a752c06c607e683
-
SHA512
0a91e1a97f068cd3250b4cf4d2b0fdf7f14f4853c167d5d9f23ca5371a3afee778abbb9fcabdf5960fcea1c84abb01fd0840d4d284f039886732f73fc6034469
-
SSDEEP
24576:KWN2hlw2w5lloOr8+rWypGsmqLMjaWepdy06Cs9wyQfWte3CBcBYauDhhsZXBdrv:3YX8lSc85P2WisPdGs6XPDSTX5Bk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7756dff900abe35a5d0c0936598f8d4.exe
Files
-
f7756dff900abe35a5d0c0936598f8d4.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yctomsij Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ioluqnkj Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE