Static task
static1
Behavioral task
behavioral1
Sample
535cf61d24f0a4803ba7aa1da92e5e6d868ad4e9afe25c6a302e52324432d065.exe
Resource
win7-20240903-en
General
-
Target
535cf61d24f0a4803ba7aa1da92e5e6d868ad4e9afe25c6a302e52324432d065.exe
-
Size
1.8MB
-
MD5
023df778a72b34eb1ce58cfd83cf8e29
-
SHA1
e17ab984b51ef77ff3b2dd98bbdb32bf8da469e4
-
SHA256
535cf61d24f0a4803ba7aa1da92e5e6d868ad4e9afe25c6a302e52324432d065
-
SHA512
999030df6da18dc5a0076b5dab337ddff9dadda010c98e189d85e5e350019fc981d9e2b5a2640906ad626b4a7aea14f50bf03b7d1e28c0660c5cf7b656f3ec78
-
SSDEEP
49152:cWG+YN+WA3+pRKMyElY2fEHpSmNYM62DFN5WTaEOu6NdeW:JG+8AOpz02fyZ16GO+NdeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 535cf61d24f0a4803ba7aa1da92e5e6d868ad4e9afe25c6a302e52324432d065.exe
Files
-
535cf61d24f0a4803ba7aa1da92e5e6d868ad4e9afe25c6a302e52324432d065.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 162KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lrzqnxri Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rknagngt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE