Static task
static1
Behavioral task
behavioral1
Sample
006ce92e56e5e24362c6434b2af14458.exe
Resource
win7-20231129-en
General
-
Target
006ce92e56e5e24362c6434b2af14458
-
Size
6.9MB
-
MD5
006ce92e56e5e24362c6434b2af14458
-
SHA1
7ae777997603590a59e12e4b640993f0de366327
-
SHA256
2f29f790688a75f26ec3f3d4cc31bf494dc98795ab2f44c15c63c5e74d4484e6
-
SHA512
c1f70b588e03acd7310e49309660c8beea28b2602d79998b9c4e72c9133933a01d2ef61ae316686690207283c103b25ca2b2c9423d6b67973b2599b6bbb0e253
-
SSDEEP
196608:9oOArCWJO1ouzrkiXh+SqHLUX2O1r0YCIMhe:9ojWrp52UXtrt3Mh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 006ce92e56e5e24362c6434b2af14458
Files
-
006ce92e56e5e24362c6434b2af14458.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.3MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nazgputd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkndmdof Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE