Static task
static1
Behavioral task
behavioral1
Sample
845f79a7b30edf97aafb682109eb1b5cd205859c2b10f786480920112a278b9c.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
845f79a7b30edf97aafb682109eb1b5cd205859c2b10f786480920112a278b9c.exe
Resource
win10v2004-20250207-en
General
-
Target
845f79a7b30edf97aafb682109eb1b5cd205859c2b10f786480920112a278b9c.exe
-
Size
1.7MB
-
MD5
b9c972302e3b1e12da876f169ab11ecb
-
SHA1
99504a9da2b9d64c20254c19ae6a9ec73cb3c763
-
SHA256
845f79a7b30edf97aafb682109eb1b5cd205859c2b10f786480920112a278b9c
-
SHA512
1289c13a39c7314741f20f00a8937dbcbe40139e8575897d0011fce3a502a7fb2921993bd17fd9500e108897febc86886864e1d31d2a6b38f3d9c1233553c3be
-
SSDEEP
49152:I3U7sUy61ZW12DJT9WZCpq+amN8uyGzWV/6f5zGwbvDMcov:B7sUy6vWYhPpq8zzVGwbvDpM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 845f79a7b30edf97aafb682109eb1b5cd205859c2b10f786480920112a278b9c.exe
Files
-
845f79a7b30edf97aafb682109eb1b5cd205859c2b10f786480920112a278b9c.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wtplgong Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tdhljdgw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE