Static task
static1
Behavioral task
behavioral1
Sample
6fadd0e17231e76267906cfdf1f6dab06924afed0065fa2b43f604121892edcb.exe
Resource
win10v2004-20230220-en
General
-
Target
6fadd0e17231e76267906cfdf1f6dab06924afed0065fa2b43f604121892edcb
-
Size
8.7MB
-
MD5
7cea13b5a8a252455deddbdd2a15421f
-
SHA1
59ad8c952350fec40fae68f208ea22152620b0b5
-
SHA256
6fadd0e17231e76267906cfdf1f6dab06924afed0065fa2b43f604121892edcb
-
SHA512
e26be7820366163535bc01fb36b8708f7047b520f73e384b981b128a2df5b8f7815ddae4fe401186d730b30083a4190fa77fefefac8adea93ee5cf5231d9a600
-
SSDEEP
98304:5y5lJrncN/gOpKwo9XaEa+1MhACrWhzBZXuTVtQCuBFbZxYi4XkNv5BKmCT2ohdi:S64OEwo9K9TCXuTVTWZXBlOiyBBFjDo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fadd0e17231e76267906cfdf1f6dab06924afed0065fa2b43f604121892edcb
Files
-
6fadd0e17231e76267906cfdf1f6dab06924afed0065fa2b43f604121892edcb.exe windows x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 6.7MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvwryiwu Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qyagpylx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ