Static task
static1
Behavioral task
behavioral1
Sample
6b6ceda6d2de0666379465778141b17898fd43e9030fae0d2cfe78ef5f77b0dd.exe
Resource
win7-20240221-en
General
-
Target
6b6ceda6d2de0666379465778141b17898fd43e9030fae0d2cfe78ef5f77b0dd
-
Size
1.8MB
-
MD5
29acc8ca6a890bfcfea521a5d5f2978f
-
SHA1
61c9418f8cfbf2f3ef74c939a94532733cc09587
-
SHA256
6b6ceda6d2de0666379465778141b17898fd43e9030fae0d2cfe78ef5f77b0dd
-
SHA512
ed89b1e689bf7729ff882d8d660481e1109344c42c46bb32612bf69853affbae0b1f7c4aaf1844cb63f88f8ed4475fa4f39bf18d81212840bb3bc0072a31fd24
-
SSDEEP
49152:W1+jI6TwpL9yyMhuXyI7ZnYyRVU69Rp7sEQ:q+jloigZYyHBP7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b6ceda6d2de0666379465778141b17898fd43e9030fae0d2cfe78ef5f77b0dd
Files
-
6b6ceda6d2de0666379465778141b17898fd43e9030fae0d2cfe78ef5f77b0dd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmvtznur Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yqgukcbs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE