Static task
static1
General
-
Target
0468941c3ad5f2db59f4f5e764de5f28a58de3868050dc06cddb4dfe0eaba636
-
Size
1.8MB
-
MD5
a6e1c66a796ac76ddf13ef236a65470b
-
SHA1
04fea679935fdd9adab4220aa55b0c28b1d75b5e
-
SHA256
0468941c3ad5f2db59f4f5e764de5f28a58de3868050dc06cddb4dfe0eaba636
-
SHA512
cb10803a37e1e56e3b956c5e12e1e049bf67ecaf122f10bf07c16a10639f3ee5699823ecd707e2c9c0051d1d05299e4dbdcd1bef0270de5a34ace24709645184
-
SSDEEP
24576:qvgNML0uUwX2Ul6FMvz3d547z4mbLZA7WB+lZ5yLtSvVN0OEiHzgc8D7hkpv:fS1B6Ord5gz4B7Wg5yIv0OOyJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0468941c3ad5f2db59f4f5e764de5f28a58de3868050dc06cddb4dfe0eaba636
Files
-
0468941c3ad5f2db59f4f5e764de5f28a58de3868050dc06cddb4dfe0eaba636.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vaaaabvo Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kxdccnbw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE