Static task
static1
General
-
Target
49115f61e97192bd2ae4821cdfec9f2688f74b823ff42442a1df62215ae65fd5
-
Size
8.7MB
-
MD5
71b41c8ef1d85a31a256283e27175c4c
-
SHA1
57c5cb75c7835a5238cbef42d922a894d6962de0
-
SHA256
49115f61e97192bd2ae4821cdfec9f2688f74b823ff42442a1df62215ae65fd5
-
SHA512
25582c9345b6bb446163b7286e35a0543e677024ab37496da1c0c3cc3de99fe06785a31bebf78526fe5935a1ef1c1f89571c658ae14c003ecafadc117949f094
-
SSDEEP
196608:8oTsJJcJxJblVXN1/1qjjsJeMgkr/aG7oVKudZxmft/QVZzesYI4aWqL4UV:nYJJKJ391/+sPgOaG74mftCSs5Wq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49115f61e97192bd2ae4821cdfec9f2688f74b823ff42442a1df62215ae65fd5
Files
-
49115f61e97192bd2ae4821cdfec9f2688f74b823ff42442a1df62215ae65fd5.exe windows x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 6.6MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
spwfhqbj Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hucjxabk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ