Static task
static1
Behavioral task
behavioral1
Sample
IqXYLXKzl6.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
IqXYLXKzl6.exe
Resource
win10v2004-20230621-en
General
-
Target
IqXYLXKzl6.exe
-
Size
17KB
-
MD5
076569d51c616ec2446a2e6b85205764
-
SHA1
e66ed4fd01550e7fef7fe4b6b4d57aaaf1109c11
-
SHA256
754794ccb5c349adb0551759cc1cd6add14616a50b5b3ffe1b4c0d133d13f300
-
SHA512
cb11acacb7c5d73b84e01fe54d7c2b1ccba60c76b1c0aa5561d7482e598716f9228ef21690a85fcdf797c181cc44d6bcc7f0734d357bdac1b14d7ebc2e24162a
-
SSDEEP
384:GWeOtTbX4sJStS77uBLbt+B6a2CaneFrmbSEM1+TAVDxfEHufIJzJf:HetAidANFAA36uwJzJf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource IqXYLXKzl6.exe
Files
-
IqXYLXKzl6.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ