Static task
static1
Behavioral task
behavioral1
Sample
1285fdb82e7930812a9c52e680143cea311d8b147cb7aa8b6ea3637e8b94a9fc.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
1285fdb82e7930812a9c52e680143cea311d8b147cb7aa8b6ea3637e8b94a9fc.exe
Resource
win10v2004-20250217-en
General
-
Target
1285fdb82e7930812a9c52e680143cea311d8b147cb7aa8b6ea3637e8b94a9fc.exe
-
Size
1.8MB
-
MD5
7a51912053a6bf0831aa861b45f6c402
-
SHA1
7912df8443372c0929fb9c2fd8b0b5019969d142
-
SHA256
1285fdb82e7930812a9c52e680143cea311d8b147cb7aa8b6ea3637e8b94a9fc
-
SHA512
9e6ed09f7eccf79f18053ec68c0e496d222eb8599217c096c213e92b8d68a0ce2a6f418cc84df381a5c7fa4b526ed1078eedffadb6fb42ecbdfd69b3c890affc
-
SSDEEP
49152:+N0PauDiXiKu2Pj/pr2/rEz0EkeT+vDEqR:60Hidj/Ferq0E6DZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1285fdb82e7930812a9c52e680143cea311d8b147cb7aa8b6ea3637e8b94a9fc.exe
Files
-
1285fdb82e7930812a9c52e680143cea311d8b147cb7aa8b6ea3637e8b94a9fc.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nwcgpfmp Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kkksvqsv Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE