Static task
static1
Behavioral task
behavioral1
Sample
6777684015fd3aad1c91fb7bdf7fb79be477351808dd0691dc94a8ae8a3cb111.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6777684015fd3aad1c91fb7bdf7fb79be477351808dd0691dc94a8ae8a3cb111.exe
Resource
win10v2004-20230915-en
General
-
Target
6777684015fd3aad1c91fb7bdf7fb79be477351808dd0691dc94a8ae8a3cb111
-
Size
5.7MB
-
MD5
d07b5bcb604d098b4d778777a570102d
-
SHA1
9b70fe9d8fe10f52c2b5f59eac3bb13dc51b3ade
-
SHA256
6777684015fd3aad1c91fb7bdf7fb79be477351808dd0691dc94a8ae8a3cb111
-
SHA512
6dd300aeb5d64df9f4794698599890b2a1bd8dcb7b11ea0f86f08392412db885d8926922aa62a5a723bc1d2a316437454f05bbf0a11ea478337d6fa7d819f74b
-
SSDEEP
98304:jGlQmkMpbdI472jLEbLJakfL2ET1s09d1G/RKl2WF8UrOsgo1uRKUyf/VrrdOLR:qlpkMBq/4bwkfLHTlbF84tv/HOLR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6777684015fd3aad1c91fb7bdf7fb79be477351808dd0691dc94a8ae8a3cb111
Files
-
6777684015fd3aad1c91fb7bdf7fb79be477351808dd0691dc94a8ae8a3cb111.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 855KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xfcqroov Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
expqjtwj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE