Static task
static1
Behavioral task
behavioral1
Sample
random.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
random.exe
Resource
win10ltsc2021-20250211-en
Behavioral task
behavioral3
Sample
random.exe
Resource
win11-20250210-en
General
-
Target
random.exe
-
Size
6.2MB
-
MD5
f26b4d7cc2be7f4290585ebfaa5aa130
-
SHA1
ceff08f33740d85ec2dbdfeed0760944f87ca0c8
-
SHA256
c3768079ea8c8a3e288f83510ac109b9f1531ac8788584fc5971b80936a30773
-
SHA512
2860fcbeb0cbc52a3088f1c65263320cbd72c8fcfdd7b5aa73be99e8dcde01079be4a7627e70a6a33a838a250a9b3441d421dbcd353872722a08dc67e4e8d23a
-
SSDEEP
98304:7e8hyXkH2Sw3+mwpNs2zZlKo6JCEBPI16THCRiWnBat/YOwZ:vwA6Gy29UknBaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource random.exe
Files
-
random.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.6MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
htccwify Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cdrwblqe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE