Static task
static1
Behavioral task
behavioral1
Sample
f7484950b8f524213225d2cd1f467284725f9d0412a968a82e74c1c37c82bc55.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f7484950b8f524213225d2cd1f467284725f9d0412a968a82e74c1c37c82bc55.exe
Resource
win10v2004-20250217-en
General
-
Target
f7484950b8f524213225d2cd1f467284725f9d0412a968a82e74c1c37c82bc55
-
Size
1.8MB
-
MD5
0a8916e7837fe7d78e33d84453d6f7d7
-
SHA1
fd27c7fb6a794008033a17c531efebd08f7da170
-
SHA256
f7484950b8f524213225d2cd1f467284725f9d0412a968a82e74c1c37c82bc55
-
SHA512
5a1575330d748d6aec2ae5a293f10af66d1f635afa9ca010504f6a95bcabc167453b6fb2dede6490ca07fca1680a4dad76b353f14a5d214021d575302126e04d
-
SSDEEP
49152:3NUH2QV3RROeYMgPc+7KctcF4GBOMYoem:3NUWw3RRO/MgneVF4G06em
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7484950b8f524213225d2cd1f467284725f9d0412a968a82e74c1c37c82bc55
Files
-
f7484950b8f524213225d2cd1f467284725f9d0412a968a82e74c1c37c82bc55.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 169KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oozkoiwr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewpjlgvf Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE