Static task
static1
Behavioral task
behavioral1
Sample
99f157621c990c39d06dc382f4755360c55eab77bb1a192e50aeaa18d1da6ea3.exe
Resource
win7-20240708-en
General
-
Target
99f157621c990c39d06dc382f4755360c55eab77bb1a192e50aeaa18d1da6ea3.exe
-
Size
1.8MB
-
MD5
10cd3ebe6be3397f2c4b391d682692a5
-
SHA1
02e5bbe848b94b8d2cf406ac83490aa32ee33520
-
SHA256
99f157621c990c39d06dc382f4755360c55eab77bb1a192e50aeaa18d1da6ea3
-
SHA512
42a7f0cdd08e2d8be5d74ec53d61e346ef9c377890dc08e96941c94797e0aa26dfbd1536e3286486265e5a365886e35ee17c7c94adec2485f8541b3beb493624
-
SSDEEP
24576:ClHxk5TzGRg8UYRJm1AdT1omYW4q+ESaFuGN3t3LDDJKgw/40JlkQUi+5RGL/Df+:eW5mRg32VShqXDFuut7a40TWudT4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99f157621c990c39d06dc382f4755360c55eab77bb1a192e50aeaa18d1da6ea3.exe
Files
-
99f157621c990c39d06dc382f4755360c55eab77bb1a192e50aeaa18d1da6ea3.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 162KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qaqdpovi Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vfzqrnps Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE